思科安全产品与解决方案2013

CiscoConfidential1©2010Ciscoand/oritsaffiliates.Allrightsreserved.思科安全产品与解决方案陈晓炜思科公司[e-mail]©2007CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSDNOverview2议程思科Secure-X安全架构云数据中心安全分支机构安全ASA5500-X下一代的智能安全网关ASA-CX智能威胁防御平台服务架构publictenantshybridprivate我们如何来保证安全性?无边界网络的发展，我们面临更多的安全挑战移动威胁云Network平台服务架构publictenantshybridprivate无边界网络的发展，对安全技术提出了新的要求有效识别终端截获并且防御最新的零日威胁防护云架构精确的准入控制防护多租户网络我们需要新的安全方法！！Network平台服务架构publictenantshybridprivateSecureX提供端到端的安全防护情景感知的策略网络设备的策略执行情景感知网关ASA5585-XServiceModuleVSGTrustSecASA1000vASA-CX云安全网关WiredWirelessvpnISE统一策略，统一管理基于云的威胁智能CSIO2012全球安全市场分析Rev($M)Y-YRev∆ShareY-YShare∆Cisco$1,982.2+9%31.2%-0.2%CheckPoint$877.3+11%13.8%+0.2%Juniper$671.2-4%10.6%-1.5%McAfee$427.7-7%6.7%-1.2%Fortinet$388.26.1%Others$1,997.731.5%Total$6,344.3+10%100.0%©2007CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSDNOverview7Frost&Sullivan2012中国安全市场分析Cisco12.5%Juniper11.6%TopSec11.1%Neusoft8.9%Venustech7.6%LeadSec(Venustech)6.4%Sangfor5.4%NSFOCUS5.3%Huawei-Symantec4.9%CheckPoint4.7%Fortinet4.4%Others17.2%NetworkSecurityMarket:CompanyMarketSharebyRevenue,China,Q22012Note:Allfiguresarerounded.Thebaseyearis2012.Source:Frost&Sullivananalysis.©2007CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSDNOverview8Frost&Sullivan中国网络安全市场发展趋势Note:Allfiguresarerounded.Thebaseyearis2012.Source:Frost&Sullivananalysis00.20.40.60.811.2-200.0400.0600.0800.01,000.01,200.020112012201320142015201620172018IDS/IPS108.9114.2133.5162.0189.1210.6227.1240.4SSLVPN52.352.659.872.085.396.8107.0115.1Firewall/IPSecVPN375.0387.2432.4495.6551.2590.2620.1644.8Column1GrowthRate(%)Revenue($Million)YearsNetworkSecurityMarket:ForecastbyTechnologySegment,China,2011-2018©2007CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSDNOverview9议程思科Secure-X安全架构云数据中心安全-ASA5585-X-65上的ASA模块-情景感知的认证平台ISE-统一安全接入anyconnectVPN分支机构安全ASA5500-X下一代的智能安全网关ASA-CX智能威胁防御©2007CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSDNOverview10Tenant3Tenant2Tenant1ASA1000VASA5585-XEndpointsVSGvmvmvmvmvmvmvmvmvmNexus1000V•从物理到虚拟的网络安全：•ASA5585/ASA-SM/IPS4500做网络安全•ASA1000v/VSG做虚拟安全•ISE提供情景感知的隔离vmvmvmISEIPS4500©2007CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSDNOverview11•带防火墙和IPS的ASA5585-X•ASA服务模块•思科智能运营中心(SIO)•思科安全管理器CSM网络安全云数据中心安全产品组合•CiscoASA1000V交换机：分布式虚拟交换机•思科虚拟化安全网关虚拟化安全•CiscoAnyConnect•TrustSec•身份认证服务引擎•SaaS网关（云安全）保护访问•红色字体为关键组件©2007CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSDNOverview12CiscoASA5585-X面向关键数据中心专门定制的系统ElasticScaleSuperiorSpanLeading-EdgeSecurityFastestconnectionspersecondHighestnumberofVPNsessionsBestofbreedfirewall,IPS,andVPNTwicetheefficacyoflegacyIPSIncludesCiscoguaranteedcoverageVersatile,always-onremoteaccessUnprecedenteddeploymentflexibility8Xperformancedensity©2010Ciscoand/oritsaffiliates.Allrightsreserved.CiscoConfidentialASA5585-XTDM13高性能，多服务的防火墙ASA5585-X业界领先的防火墙，IPS和VPN服务RaisingtheBarforFirewall,IPS,andVPNCapabilitiesMultiScaleTMPerformanceProvidesupto35GbpsoffirewallthroughputExtendsfirewallandIPSthroughputto10GbpsScalesupto10,000usersofremoteaccessVPNInvestmentProtectionScalablechassisthatgrowswithyourbusinessIndustry-LeadingMulti-ServiceSecurityAdvancedthreatprotectionwithBotnetTrafficFilteringandhardware-acceleratedIPSwithGlobalCorrelationLeading-edgeremoteaccesswithCiscoAnyConnect™Builtupon15yearsofsecurityinnovation©2010Ciscoand/oritsaffiliates.Allrightsreserved.CiscoConfidentialASA5585-XTDM14CiscoASA5585-X产品系列ASA5585-S10P10ASA5585-S20P20ASA5585-S40P40ASA5585-S60P60SecuringInternet-EdgeandCampusNetworksScalableDataCenterSolutionsPerformance,Scalability,AdaptivityDataCenterCampusBranchOfficeEnhancingtheCustomerExperience©2010Ciscoand/oritsaffiliates.Allrightsreserved.CiscoConfidentialASA5585-XTDM15CiscoASA5585-X系列性能指标NEWNetworkLocationPerformanceMaxFirewallMaxIPSMaxIPSecVPNMaxIPSec/SSLVPNPeersPlatformCapabilitiesMaxFirewallConnsMaxConns/SecondPackets/Second(64byte)BaseI/OMaxI/OVLANsSupportedHASupportedInternetEdge/CampusASA5585SSP-2010Gbps3Gbps2Gbps10,0002,000,000125,0003,000,0008GE+210GE16GE+410GE250A/AandA/SCampus/DataCenterASA5585SSP-4020Gbps5Gbps3Gbps10,0004,000,000200,0005,000,0006GE+410GE12GE+810GE250A/AandA/SDataCenterASA5585SSP-6040Gbps10Gbps5Gbps10,00010,000,000350,0009,00,0006GE+410GE12GE+810GE250A/AandA/SInternetEdge/CampusASA5585SSP-104Gbps2Gbps1Gbps50001,000,00050,0001,500,0008GE+210GE16GE+410GE250A/AandA/S©2010Ciscoand/oritsaffiliates.Allrightsreserved.CiscoConfidentialASA5585-XTDM16高性能的CiscoASA5585-X多服务平台UndertheCoversSecurityServiceProcessorsMulti-servicescapableDedicated64bitmulti-coreprocessorsFuture-proofhardware2RUChassis2xfull-slotmodules1xfull-slot+2xhalf-slotmodulesOIRcapableMultiGigabitFabricPassivebackplaneModuletomodulecommunicationsPacketprioritizationandshapingeUSB2GBinternalConveniencestorageSecuritycredentialsRedundantHotSwappablePowerSupplyUnitsFronttobackairflowGEPortsUpto8x10GSFP+withOIRsupportUpto16x1GbECuSFP/SFP+slotsonallmodules©2010Ciscoand/oritsaffiliates.Allrightsreserved.CiscoConfidentialASA5585-XTDM17ASA5585-X防火墙/VPN模块硬件比较ASA