F5 NETWORKS Good, Better & Best
Nick Stokmans Account Manager
The F5 Advantage –Security $
ICSA Certified Default Deny ACL’s Full Proxy DoS Mitigation SSL IP Intelligence
Firewall
Load Balancing Application Awareness Persistence
Application Delivery Controller
VDI
Confidential © F5 Networks, Inc
Attacker
Customers
Enterprise Users
VDI
VDI
WEB
V
WEB
WEB
2
Case Study – Firewall module • Bank • Uitdaging • Bestaande Cisco firewalls vielen om door DDoS aanval • Sessie tabellen liepen vol •
Oplossing • F5 BIG-IP met AFM (Advanced Firewall Manager) voor de bestaande Cisco firewalls • Dankzij Proxy architectuur en DDoS capaciteiten beter beschermd tegen DDoS aanvallen
• Omzet • 4x BIG-IP 7050 met LTM en AFM • Omzet: $ 450k
Confidential © F5 Networks, Inc
3
The F5 Advantage –Security $ Attacker
Customers
Enterprise Users
ICSA Certified Default Deny ACL’s Full Proxy DoS Mitigation SSL IP Intelligence
Remote Access Pre-Authentication Multifactor Authentication Single Sign-On Cloud Federation End point Inspection
Firewall User Access Control
Load Balancing Application Awareness Persistence
Application Delivery Controller
VDI
Confidential © F5 Networks, Inc
VDI
VDI
WEB
V
WEB
WEB
4
The F5 Advantage –Security $ Attacker
Customers
Enterprise Users
ICSA Certified Default Deny ACL’s Full Proxy DoS Mitigation SSL IP Intelligence
Remote Access Pre-Authentication Multifactor Authentication Single Sign-On Cloud Federation End point Inspection
Firewall User Access Control Web Application Firewall
Load Balancing Application Awareness Persistence
Application Delivery Controller
VDI
Confidential © F5 Networks, Inc
VDI
VDI
WEB
V
WEB
L7 Firewall Application Security Bot Detection Web Scraping L7 DoS mitigation Data Leakage ISO Compliance
WEB
5
Case Study – Authenticatie & Applicatie Security • Zorginstelling • Uitdaging • Migratie naar nieuwe versie van Citrix XenApp versie 7.5 • Citrix Access Gateway (CAG) was reeds aanwezig • Oplossing • F5 BIG-IP met Authenticatie en applicatie beveiliging • Flexibiliteit gaf de zorginstelling de mogelijkheid om in de toekomst over te stappen naar bijv. VMware of Microsoft VDI • Mogelijkheid om te integreren met DigiD. • Omzet • 2x BIG-IP 4000 Best • Omzet: $ 200k Confidential © F5 Networks, Inc
6
The F5 Advantage –Security $ Business Continuity Global Availability DNS Security ICSA Certified Default Deny ACL’s Full Proxy DoS Mitigation SSL IP Intelligence TCP Opt Caching Compression
SilverLine
DNS Services
User Access Control Acceleration & Optimization
Web Application Firewall Application Delivery Controller
HIGH PERFORMANCE SERVICES FABRIC
VDI
Confidential © F5 Networks, Inc
Remote Access Pre-Authentication Multifactor Authentication Single Sign-On Cloud Federation End point Inspection
Firewall
Load Balancing Application Awareness Persistence Flexibility Performance Scalability Multi-tenancy Programmability
Attacker
Customers
Enterprise Users
VDI
VDI
WEB
V
WEB
L7 Firewall Application Security Bot Detection Web Scraping L7 DoS mitigation Data Leakage ISO Compliance
WEB
7
The F5 Advantage – Simplified Business Model
INTELLIGENT SERVICE ORCHESTRATION DNS Services
BEST
Firewall
BETTER
User Access Control
Acceleration & Optimization
Web Application Firewall Application Delivery Controller
GOOD
HIGH PERFORMANCE SERVICES FABRIC
VDI
Confidential © F5 Networks, Inc
VDI
VDI
WEB
V
WEB
WEB
8
Case Study – Van Good naar Best • E-retail • Uitdaging • Cisco ACE replacement over 2 DC’s • Logische oplossing • 4x LTM 2000 • Omzet $ 80k • Doorvragen • Last van Webscraping en moest PCI Compliant zijn • Zochten een Authenticatie platform voor de wederverkopers • Loadbalancing tussen de 2 datacenters. • Omzet • 4x BIG-IP 5050 Best • Omzet: $ 500k Confidential © F5 Networks, Inc
9
Food for thought
• Doorvragen • Top IT-prioriteiten/ initiatieven agenda • Probeer breder te positioneren • “Positie” in het netwerk • Combineer budgetten • “Story Telling”
Confidential © F5 Networks, Inc
10
devcentral.f5.com facebook.com/f5networksinc linkedin.com/companies/f5-networks twitter.com/f5networks youtube.com/f5networksinc
11
