PACKETVIPER NEXT GENERATION GEO-IP FILTER HOW NEXT GENERATION GEO-IP FILTERING CAN SAVE ON USAGE COSTS
PACKETVIPERNEXT GENERATION GEO-IP FILTER
HOW NEXT GENERATION GEO-IP FILTERING CAN SAVE ON USAGE COSTS
FRANCESCO TRAMA - CO-FOUNDER
PACKETVIPER - BASED IN PITTSBURGH PA
▸ Next Generation Geo-IP Filter
▸ Inline device that replaces nothing
▸ Bi-directional per-port company and country filtering
▸ 5 min install
▸ Patented Geo-IP filtering
TRAFFIC VOLUMEWHAT IS IT?
TRAFFIC VOLUME
WHAT IS IT
▸ Legitimate Business Traffic (Example: Web, VPN, Mail)
▸ Vulnerability Probes To Public Applications and Service
▸ Port Scans To Identify Exposures
▸ Password Guessing to Identified Exposures
▸ Rogue Application (Example: Browser Tools Bars)
▸ Malware (trojans, virus searching for victims)
TRAFFIC VOLUME
FTP
WWW
VPN
SSH
TELN
IMAP
FTP
WWW
VPN
SSH
TELN
IMAP
FIREWALL
TRAFFIC VOLUME
TRAFFIC VOLUME CHALLENGES
▸ Increased load to firewalls, and public facing services
▸ Limits visibility, hampers threat discovery, and increases risk
▸ Increases usage based costs SAAS and products
▸ Increases security management
▸ Creates complexity to accommodate the varieties of traffic
▸ Increases bandwidth usage
TRAFFIC VOLUME EFFECTS ON CLOUD ENVIRONMENTS
CustomerCloud
CustomerCloud
CustomerCloud
CustomerCloud
CustomerCloud
CustomerCloud
Internet
Wastes Cycles
High
Medium
Low
CPU IHOPSMEM NET
TRAFFIC LOGGING
FTP
WWW
VPN
SSH
TELN
IMAP
FTP
WWW
VPN
SSH
TELN
IMAP
FIREWALL
L O G G I N G
L O G A N A LY Z E I N S P E C T A L E R T T R O U B L E S H O O T / I D E N T I F Y
TRAFFIC VOLUME
FTP
WWW
VPN
SSH
TELN
IMAP
F W
I D S / I P S
S PA M /W E B F / W
S I E M
U T M
NEXT GENERATION GEO-IP FILTERING
REDUCES LOADS THROUGH ENTIRE SECURITY PROCESS
FTP
WWW
VPN
SSH
TELN
IMAP
FIREWALL
FTP
WWW
VPN
SSH
TELN
IMAP
PACKETVIPER
DROPS AS MUCH AS 70%DROPS LOAD, LOGGING, AND ALERTING
BACK
Portal
Web
Load Drop
Load Drop
Load Drop
Load Drop
Logs Drop
L O G A L E R T S
Alerts Drop
NEXT-GEN GEO-IP EFFECT
100,000 Connection
A N A LY Z E
Analysis Drop
500,000 ConnectionGEO
PacketViper
= FA S T E R T H R E AT I D E N T I F I C AT I O N
NEXT GENERATION GEO-IP FILTERING
HOW NEXT GENERATION GEO-IP FILTER REDUCES VOLUME
▸ Complete visibility into traffic for better operational decision
▸ Limits countries to specific ports bi-directionally
▸ Limits companies to specific ports bi-directionally
▸ Instant honeypot sensors for probing
▸ Flooding protectors
▸ Traffic redirection by country and company
▸ Rate limiting by country and company
▸ Scheduled traffic black-out periods, scheduled traffic scrutiny
▸ More…
NEXT GENERATION GEO-IP FILTER LOWERS USAGE COSTS
‣ Less Connections ‣ Less Sessions ‣ Less Threats ‣ Less APP-ID Through-put ‣ Less Firewall Bandwidth
PA-5060 Security Appliance
PA-5020 Security Appliance
E8500 Security Appliance
10K
39K131K
42KE5500
Security Appliance
Before
After
Before
After
DELLPALO ALTO
NEXT GENERATION GEO-IP FILTER LOWERS USAGE COSTS
‣ Less Connections ‣ Less Sessions ‣ Less Threats ‣ Less Logging ‣ Less Through-put
20Gb Per Day
$560.00 Per Month
7400 Dedicated Platform Manager
$61,500.00
$137,750.00$1000K Per Month
10GB per day
5500 DPM Security Appliance
Before
After
Before
After
LOGRYTHMSPLUNK
BEFORE BUYING NEW OR UPGRADING CONSIDER A PACKETVIPER
Cisco
Palo AltoHP
CheckPoint F5Fortinet
Sonicwall
SplunkLogRythm
McAfee SophosBarracuda
WatchGuard
5min
10days
25% Load, volume & threats reduction
Installation
Free use and audit
Try our FREE 5*10*25 Program
http://go.packetviper.com/5-10-25
CHECK OUT PACKETVIPER USAGE CALCULATOR
HTTP://GO.PACKETVIPER.COM/ROI-CALCULATOR
CHECK CALCULATOR YOURSELF