© Copyright Fortinet Inc. All rights reserved.

Arquitetura de Segurança para Redes Wireless

Fabio Paim – Systems Engineer

IT Trends

3

IT Trends

4

IT Trends

5

3rd Platform Innovation Accelerators

6

3rd Platform Security Challenges Examples

E-MAIL

7

3rd Platform Security Challenges Examples

INTERNAL COMMUNICATION

8

3rd Platform Security Challenges Examples

CUSTOMER SERVICES

9

3rd Platform Security Challenges Examples

STORAGE

10

3rd Platform Security Challenges Examples

MOBILITY

11

Network Impact

Higher core throughput & scalability Higher port density Increased small/mixed packet traffic Low user latency Increased east-west traffic

3rd Platform Network Impact

12Confidential

We get it: Stay safe and reduce the pressure!

Internal Pressures Increasing

Your Enterprise is Under Constant Attack

Security is No Longer a “Nice to Have”

More and More Devices Connected to the Network

Regulations and Policies are Multiplying

Your World Isn’t Easy…

Fortinet Security Architecture

14Confidential

…but we are protected we have a NGFW…

15Confidential

Internal Segmentation Firewall (ISFW)

16

FortiMail

End-to-End Global Cybersecurity Platform

COREACCESS APPs

& DATA

THREATINTELLIGENCE

GLOBALMANAGEMENT

USERS NETWORK DATA CENTER

FortiGate

FortiAP

FortiSandbox

FortiSwitch

FortiGate VM

FortiWeb

FortiManager FortiAnalyzer

FortiGate for AWS

FortiGate VMX

Rugged Rugged

FortiWiFiFortiADC

17

Supports Enterprises of ALL SIZES

Securing the Wireless

19

Today’s Wi-Fi Infrastructure Trends

20

Wi-Fi Becoming Primary Access Medium

21

Wireless Ranked as the Most Vulnerable IT Asset

22

FORTISWITCH

FORTIAP

SWITCH

Typical Architecture with Access Points

WAN OPTIMIZATIONANTISPAMANTIVIRUSFIREWALL

WIRELESS CONTROLLER

VPNINTRUSION PREVENTIONAPPLICATION CONTROL

WEB FILTERINGWI-FI CONTROLLER

OVERLAY WIRELESS MANAGEMENT SYSTEM

Lower cost of acquisition Lower cost of ownershipImproves security provisioning

Security ConsolidationSecurity + Wireless Consolidation

23

WLAN Architecture and Deployments

24

FortiAP-S (Smart AP’s)

• Managed by FortiCloud • No controller required • FortiGuard services run on each AP • Simplifies deployment and management

25

FortiCloud Managed Wi-Fi Security Capabilities

26

Centralized Wireless Management and Reporting

FortiManager FortiAnalyzer

• FortiManagerGlobal Wireless ManagementCentralized AP Firmware UpgradesSSID and Radio Policy Configuration Centralized Rogue AP SuppressionReal-time Client Monitoring

• FortiAnalyzerWireless Usage ReportingSecurity Log Analysis and ForensicsWireless PCI Compliance Reporting

Branch OfficeBranch Office

Central Location

ManagementLogging

27

MESH Deployment

Dynamic Multi-hop Mesh with resiliency Point-to-point / Multipoint Bridging

28

FortiAP Flexible Approach

• “One Size Fits All” Architecture Doesn’t Work

• Some customers prefer cloud, others need controller

• Unified WLAN works for some, overlay for others

• No security or performance compromise

• Architecture change without rip-and-replace

29

FortiPresence - Presence and Positioning Analytics

Total visitor trafficReal time visit capture rateDwell time durationA/B comparison across storesRepeat visitors, frequencyVIP Alert

Heat maps with animated flows

Real-time density, staff resources

Measure marketing campaign effectiveness

30

What’s next?

Let’s move to the Next Generation Wireless Security

Architecture

31

DON’T GO UNPROTECTED