Security打铸电力信息系统安全架构(1)
2003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.Check Point pur Security打铸电力信息系统平安架构王建龙Jwangcheckpoint 22003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.n 电力企业信息平安建设需求分析n Check Point公司的平安解决方案n 统一网络平安架构n 产品线介绍n Check Point公司介绍n Q&A议程32003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.电力信息系统生产控制系统电力企业信息系统介绍生产管理系统管理信息系统网站系统信息网络42003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.电力企业信息系统平安需求分析电力业务连接、灵活可用性、性能成本、管理安全措施控制、调整、策略、规则、限制2003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.42003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.安全管理需要一个真正专业和平衡的全专家52003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.业务平安保护要求系统复杂厂商太多管理困难TCO效果不佳等级 化 保护 要 求电力企业信息系统平安需求分析62003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.网络平安主机平安OPSEC数据平安访问控制安全审计结构安全边界安全入侵防范恶意代码防范网络设备身份鉴别剩余信息保护恶意代码防范身份鉴别安全审计入侵防范资源控制应用平安身份鉴别访问控制安全审计剩余信息保护通信完整性通信保密性抗抵赖软件容错资源控制管理平安数据完整性数据保密性数据备份和恢复集中远程分权可视智能 电力企业信息系统平安需求分析72003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential. Protected保护 保护电力行业根底设施及数据不受任何威胁、入侵及损失 Unified统一 . 一个统一的体系结构，提供高度可管理性及扩展性 Reliable 可靠 . 保证生产力及业务持续性 Extensible 可扩展能有效抗击今天及未来的威胁PURE 平安降低复杂性及提高可扩展性为网络各层提供保护高度灵活，对新涌现的威胁迅速作出反响Check Point 的承诺: PURE 平安82003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.网络&网关数据&端点平安管理Check Point的整体平安Totalsecurity from Check Point92003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.单一 VPN 解决方案IPSCheck Point整体平安方案统一网关单一管理单一端点FW + 应用智能 综合 UTM解决方案程序控制 + NACAV / 反间谍软件数据平安，磁盘加密VPN 客户端方针定义的单一控制台单一事件响应审计和遵从网络安全主机安全应用安全数据安全管理安全102003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.Check Point PURE Security112003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.Check Point PURE Security122003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.Check Point PURE Security132003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.Check Point PURE Security142003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.Check Point PURE Security152003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.Check Point PURE Security162003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.Check Point PURE Security172003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.Power-1 高性能平安网关吞吐量：FW 14 Gbps/ VPN3.7GCheck Point Power-1高端防火墙Cluster XLCore XLQoSIPS/6.1G应用平安182003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.UTM-1统一威胁管理网关入侵防御subscription防间谍软件subscriptionWeb内容过滤subscriptionVPN (site-to-site, remote access)standard网关防病毒subscription 市场最好的防火墙产品HTTPFTPInstant MsgE-mailP2PVoIPSQLstandard* End of Q1 2007邮件平安防护subscriptionSSL VPNsubscription192003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.Endpoint 终端平安防护全面的终端平安防护解决方案全面的终端平安防护解决方案抑制终端风险的传播范围唯一一款集六大终端平安根本要素与一体的统一解决方案唯一一款包括数据平安和VPN访问的解决方案数据安全访问控制VPN统一管理最终用户透明防火墙防病毒防间谍软件唯一！唯一！202003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.终端平安的六个根本要素需求根本功能模块防病毒，防间谍软件，防火墙，程序控制保护数据强制策略遵从平安的远程访问简化的管理无缝，透明的用户体验抑制恶意软件整盘加密,，移动介质加密，端口/设备控制VPN客户端，灵活的连接和认证选择统一管理系统，单一的控制台单一客户端，精简的安装包, 对最终用户透明不可见NAC, 策略检查，自动修复等212003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.SmartCenter / P-1平安控管中心LDAP-enabled用户管理VPN-1/FireWall-1策略FloodGate-1QoS 策略VPN-1 SecureClient 策略第三方产品集成NAT 策略10.10.17.010.10.17.0199.206.24.2199.206.24.2SmartMapSmartStatus222003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.全球平安领域的领导者2006 Check Point Software Technologies Ltd. Proprietary & Confidential 财务实力 2007年的营业额达到7.31亿美元，增长27% 总市值为54亿美元 (NASDAQ) 现金储备多达12亿美元市场地位 全球防火墙/VPN 领先厂商, 31%市场份额 * 全部财富100强企业都采用Check Point产品 财富500强企业中，有98%是我们的客户* Frost & Sullivan业务分布 1,800多名员工 (约一半为R&D员工) 在28个国家及地区设有69个办事处 在88个国家及地区拥有2,200个伙伴 总部分别设于以色列及美国加州232003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.Firewall/VPN 市场份额Check Point2007 Market ShareMarket size approximately $2.5B/yearSource data: IDC, public company data242003-2007 Check Point Software Technologies Ltd. All rights reserved. Proprietary and confidential.强大的创新能力强大的创新能力StatefulInspection I专利5,606,668TrueVectorEngine I专利5,987,611TrueVectorEngine II专利6,850,943CooperativeEnfor
