BluecoaADN互聯(lián)網(wǎng)安全網(wǎng)關(guān)方案

BlueCoatSecureWebGateway解決方案以及行業(yè)應(yīng)用JamesQian/錢江華南區(qū)技術(shù)支持議程公司簡(jiǎn)介BlueCoatSecureWebGateway分層防護(hù)解決方案Internet代理網(wǎng)關(guān)

BlueCoatProxySG網(wǎng)址過(guò)濾數(shù)據(jù)庫(kù) BlueCoatWebFilter防病毒網(wǎng)關(guān) BlueCoatProxyAV企業(yè)移動(dòng)用戶防護(hù) BlueCoatProxyClient全球云安全服務(wù)

BlueCoatWebPulse防數(shù)據(jù)泄漏 BlueCoatDLPBlueCoatSecureWebGateway管理監(jiān)控平臺(tái)集中管理統(tǒng)一平臺(tái) BlueCoatDirector日志收集平臺(tái) BlueCoatReporter2關(guān)于BlueCoat公司34贏利的上市公司(NASDAQ:BCSI)1996年成立CacheFlow,專注webcache2006年收購(gòu)NetAppNetCache產(chǎn)品線2008年收購(gòu)Packeteer150多個(gè)國(guó)家的15,000+客戶97ofTop100fromFortune?Global5008ofTop10GlobalSP市場(chǎng)的領(lǐng)導(dǎo)者安全Web網(wǎng)關(guān)(webcache)

#1（Gartner）廣域網(wǎng)加速市場(chǎng)#1（IDC）*BCSI&PKTRcombinedrevenueBlueCoat公司簡(jiǎn)介Gartner的魔力象限評(píng)比中位于領(lǐng)導(dǎo)者象限地位SecureWebGateway,2008Source:GartnerMagicQuadrantforSecureWebGateways,200866BLUECOAT產(chǎn)品線SG8100SeriesPerformanceRemoteOffices

Upto250users800–

4000users3000–50,000+usersWANThroughputConnected

UsersUpto20Mbps100Mbps–

140Mbps200Mbps–400+MbpsCorporateHeadquarters30–50Mbps150–

1000usersSG510SeriesSG810SeriesSG210SeriesAV810SeriesAV510SeriesAV210SeriesProxy

Client遠(yuǎn)程移動(dòng)用戶BlueCoatReporterSG9000SeriesBlueCoat

Director7FinancialHealth&PharmaceuticalsEnergy,Oil&GasGovernmentConsumer&RetailManufacturing/IndustrialBlueCoatAPACReferences

BLUECOAT中國(guó)主要客戶能源：中國(guó)石油天然氣股份有限公司（PetroChina）；中國(guó)石油化工股份有限公司（SinoPec）；電信：（運(yùn)營(yíng)商和.COM公司）中國(guó)電信總部；中國(guó)網(wǎng)通總部；廣東移動(dòng)；上海電信；浙江電信；上海移動(dòng)；福建移動(dòng)；重慶移動(dòng)；ChinaCache；新華網(wǎng)；央視國(guó)際；阿里巴巴；淘寶網(wǎng)金融：（銀行，基金，證券，保險(xiǎn)公司）建設(shè)銀行總行及分行（32個(gè)?。?；中國(guó)銀行總行；交通銀行總行及分行；民生銀行總行；中國(guó)人民銀行總行；中國(guó)人壽；友邦保險(xiǎn)；企業(yè)：（制造業(yè)，交通運(yùn)輸，煙草公司，國(guó)際集團(tuán)企業(yè)，醫(yī)療等）中國(guó)南方航空；中國(guó)東方航空；中國(guó)遠(yuǎn)洋運(yùn)輸（集團(tuán)）總公司（COSCO）政府：國(guó)家統(tǒng)計(jì)局；廣東省統(tǒng)計(jì)局；廣東高等人民法院；廣州市海珠區(qū)政府；香港特區(qū)政府BlueCoatSecureWebGateway解決方案

8安全代理網(wǎng)關(guān)ProxySG9Internet高性能操作系統(tǒng)SGOS?和硬件平臺(tái)Linux,WindowsandSolarisarenotSecurewebgatewayoperatingsystemsProxySG支持透明、顯式代理，可串接、旁路，可以通過(guò)L4-7Switch/WCCP實(shí)現(xiàn)負(fù)載均衡專有的硬件平臺(tái)，獨(dú)立操作系統(tǒng)，非Windows或Linux通用系統(tǒng)無(wú)需加固，無(wú)需補(bǔ)丁沒(méi)有安全方面的隱患冷啟動(dòng)<60秒，熱啟動(dòng)<10秒安全的、面向?qū)ο蟮膶Ｓ貌僮飨到y(tǒng)基于對(duì)象的存儲(chǔ)(比文件系統(tǒng)快三倍以上，高流量時(shí)性能平穩(wěn))自適應(yīng)的主動(dòng)更新算法(保持緩存內(nèi)容最新)對(duì)象并行獲取技術(shù)(解決瀏覽器會(huì)話數(shù)限制)ScalableTCPStack優(yōu)化自動(dòng)調(diào)節(jié)緩存滑動(dòng)窗口設(shè)用于丟包嚴(yán)重的網(wǎng)絡(luò)環(huán)境基于對(duì)象操作系統(tǒng)ScalableTCPStack硬件優(yōu)化智能緩存10ProxySG支持的協(xié)議庫(kù)HTTP,HTTPS,FTP,DNSCIFS,MAPI,SOCKS(v4/v5),TelnetP2P(KaZaa,Gnutella,BitTorrentandeDonkey)IM(AIM,MSN,YahooMessengers)RTSP/QuickTime,MMSStreamcaching/splitting,plusCDNTCP-Tunnel(uniqueapplicationservices)ProxySGprovidesmethod-levelcontrolsforHTTP,HTTPS,IM,FTP,andSOCKSInternetProxyLibrary基于對(duì)象操作系統(tǒng)ScalableTCPStack硬件優(yōu)化智能緩存ProxySG支持的認(rèn)證證（Authentication）ActiveDirectory(NTLM,Kerberos,LDAP,SS0)NovelleDirectory(LDAP,SSO)Tokens(SecureID,Safeword)AuthenticationSchemesOracleCOREid,Siteminder,X.509,LocalCredentialTransportNTLM,Basic/64,SSL/64,HTMLForm,SSLFormExplicitProxyAuthPop-upLoginMappingUserstoTrafficIPAddress,Cookies,DomainServer(SSO)SupportedProtocolsLDAP,RADIUS,XML,UnlimitedAuth.SequencingAssignedFailuretoGuestmodeAuthenticationprovidesthefoundationforidentitybasedpoliciesandaccurateloggingInternetPolicyEngineProxyLibrary基于對(duì)象操作系統(tǒng)ScalableTCPStack硬件優(yōu)化智能緩存AuthenticationInternetPolicyEngineProxyLibrary基于對(duì)象操作系統(tǒng)ScalableTCPStack硬件優(yōu)化PolicyEngine智能緩存Authentication12ProxySG策略控制引引擎VisualPolicyManager圖形化策略略管理工具具Over200triggersandactionsforgranularpolicyrulesPicklists&wizardstoquicklydefinepolicies(authuser/group)Definecustomalertstoadvise&coachusersCommandLineInterface(CLI)命令行PopularwithnetworkadminsthatpreferCLIcommandsAllProxySGpolicycontrolsavailableinCLIContentPolicyLanguage(CPL)CPL腳本語(yǔ)言RichlanguagewithfullexpressionsupportAccesstoheaderelements(request/response)Copy/pastepre-definedBlueCoatadvancedpoliciesBlueCoatSecureWebGateway解決方案13防病毒網(wǎng)關(guān)關(guān)ProxyAVProxyAV防毒墻InternetPolicyEngineProxyLibrary基于對(duì)象操作系統(tǒng)ScalableTCPStack硬件優(yōu)化PolicyEngine智能緩存Authentication防病毒網(wǎng)關(guān)關(guān)ProxyAVProxyAVwithleadingAVMengines支持病毒庫(kù)庫(kù)McAfee,KASPERSKY,Sophos,panda阻止病毒、、蠕蟲、木木馬、惡意意代碼、及及間諜軟件件掃描HTTP（S）,FTP流量支持ICAP,ICAP+,Secure-ICAP協(xié)議性能通過(guò)兩兩個(gè)緩存優(yōu)優(yōu)化內(nèi)容緩存可可達(dá)24-32%性能提高對(duì)靜態(tài)對(duì)象象“掃描一一次，服務(wù)務(wù)多次”對(duì)動(dòng)態(tài)對(duì)象象，指紋Hash避免重復(fù)掃掃描集成緩存功功能處理，，高達(dá)300Mbps吞吐，7-9ms延遲智能的AV-Cache集成AV數(shù)據(jù)庫(kù)更新新后，后臺(tái)臺(tái)重新掃描描InternetInternalNetworkBlue

CoatAVBlueCoatSGProxy/CacheICAP+BlueCoatSecureWebGateway解決方案15網(wǎng)址過(guò)濾數(shù)數(shù)據(jù)庫(kù)BCWF16BlueCoatURLFilteringBlueCoatWebFilter70+分類,1500萬(wàn)網(wǎng)站，覆蓋蓋數(shù)十億網(wǎng)頁(yè)頁(yè),50+語(yǔ)言一個(gè)網(wǎng)站多個(gè)個(gè)分類，Web2.0網(wǎng)站分類精確確動(dòng)態(tài)實(shí)時(shí)防護(hù)，拒拒絕可疑網(wǎng)站站與間諜軟件件可疑網(wǎng)站覆蓋蓋率98%出錯(cuò)頁(yè)面可以以定制支持第三方數(shù)數(shù)據(jù)庫(kù)，及本本地?cái)?shù)據(jù)庫(kù)BlueCoatWebFilter,SmartFilter,Websense商業(yè)數(shù)據(jù)庫(kù)PlusregionalURLlists&customURLdb/categories地區(qū)法律、客客戶自定于數(shù)數(shù)據(jù)庫(kù)Allow/Denylists,pluscustomoverrides&exceptions黑白名單多個(gè)數(shù)據(jù)庫(kù)并并行InternetURLFilterDBPolicyEngineProxyLibrary基于對(duì)象操作系統(tǒng)ScalableTCPStack硬件優(yōu)化PolicyEngine智能緩存AuthenticationProxyAV防毒墻BlueCoatSecureWebGateway解決方案17企業(yè)移動(dòng)用戶戶防護(hù)18遠(yuǎn)程（移動(dòng)））用戶安全策策略控制RemoteWeb訪問(wèn)控制不接入公司的的網(wǎng)絡(luò)，也能能享受公司網(wǎng)網(wǎng)址過(guò)濾安全全措施帶來(lái)的的保護(hù)NolicensingforProxyClient,plusanextensionofWebFilteruseInternetPolicyEngineProxyLibrary基于對(duì)象操作系統(tǒng)ScalableTCPStack硬件優(yōu)化PolicyEngine智能緩存AuthenticationURLFilterDBProxyClientProxyAV防毒墻BlueCoatSecureWebGateway解決方案19BlueCoat全球云安全服服務(wù)20BlueCoatWebPulse云安全服務(wù)基于群防體系系由超過(guò)6,200萬(wàn)用戶組成的的社區(qū)每天分析超過(guò)過(guò)2億個(gè)URLWeb請(qǐng)求使用多個(gè)威脅脅檢測(cè)引擎，，機(jī)器，人工工InternetPolicyEngineProxyLibrary基于對(duì)象操作系統(tǒng)ScalableTCPStack硬件優(yōu)化PolicyEngine智能緩存Authentication云安全服務(wù)URLFilterDBProxyClientProxyAV防毒墻BlueCoat用戶無(wú)需下載，保護(hù)訪問(wèn)BlueCoatWebPulse云安全服務(wù)16個(gè)危險(xiǎn)引擎機(jī)器分析人工分析動(dòng)態(tài)鏈接分析木馬防護(hù)名譽(yù)分析實(shí)時(shí)分級(jí)服務(wù)21WebPulse?ProxyClientK9ProxyAVWebfilter6500萬(wàn)個(gè)BlueCoat用戶社區(qū)每周12億個(gè)用戶請(qǐng)求內(nèi)容分類WebPulse工作原理–DynamicLinks22UsersProxySGWebcontentsWebcontentsdownloadsw/malwareMultipleThreatEnginesMachineAnalysisHumanRatersWebPulseDatacenterInternetURLisgoodURLItDoesn’tKnowProxySGProxySGIt’sbadIt’sBadIt’sBadRealtimeupdatePullandcaching–5mins……23Web2.0保護(hù)和過(guò)濾WebfilterOnlyBlockstheDesiredWeb2.0Content,EnsuringGovernance&ComplianceBlueCoatSecureWebGateway解決方案24BlueCoat企業(yè)防信息泄泄露25BlueCoat防信息泄露ProxySGwithleadingDLP/ILPsolutionsBlueCoatDLP700/1700/2700，Email/Web/NetworkDLP支持第三方廠廠商SYMC/Vontu,RSATablus,VeriCept,MFE/Reconnex,ICAP,Secure-ICAPProxySGcontentcontrolsMethodlevelcontrols(HTTP,SSL,FTP,SOCKS)Restrictoutboundfilesinwebmail,IMandFTPperuser/groupAbilitytofilter/strip/replacecontenttypesKeywordsearchinIMInternetPolicyEngineProxyLibrary基于對(duì)象操作系統(tǒng)ScalableTCPStack硬件優(yōu)化PolicyEngine智能緩存Authentication云安全服務(wù)URLFilterDBProxyClientProxyAV防毒墻DLP/ILP防信息泄露EnterpriseScalabilityFromsmalltolargeenterpriseRedundancyandhighavailabilityMulti-functionAppliancesEmailDLPWebDLPNetworkDLPDiscoveryCentralmanagementBlueCoatDLPisScalableDLP700DLP1700&DLP2700ModelUsersDLP700250DLP17005,000DLP270020,000BlueCoat多層安全防防護(hù)體系Layer5:全球云安全服務(wù)WebPulseServiceLayer4:企業(yè)移動(dòng)用戶綜合安全保護(hù)

ProxyClientLayer3:防數(shù)據(jù)泄漏

BlueCoatDLPLayer2:聯(lián)機(jī)安全威脅

ProxyAVLayer1:Web內(nèi)容以及安全控制

ProxySG+WebFilter網(wǎng)絡(luò)層防火墻L4-L7BlueCoatSolutionL2-L4Firewall網(wǎng)絡(luò)安全PerimeterprotectionAccesscontrolStatefulinspectionDoSprotectionWeb安全CloudMalwareDefenseSSLInspectionDynamicURLFilteringPolicyControlDataleakageProtectroamingusers27BlueCoatSecureWebGateway管理理監(jiān)監(jiān)控控系系統(tǒng)統(tǒng)28BlueCoatDirector集中中管管理理統(tǒng)統(tǒng)一一平平臺(tái)臺(tái)29BlueCoatDirector集中管理統(tǒng)一一平臺(tái)綜合管理特性性安全控制策略略統(tǒng)一分發(fā)自動(dòng)操作系統(tǒng)統(tǒng)，license升級(jí)配置集中備份份或恢復(fù)自動(dòng)的任務(wù)調(diào)調(diào)度設(shè)備運(yùn)行狀態(tài)態(tài)健康檢查通過(guò)加密的GUI或CLI遠(yuǎn)程管理設(shè)備備同時(shí)管理500個(gè)設(shè)備InternetPolicyEngineProxyLibrary基于對(duì)象操作系統(tǒng)ScalableTCPStack硬件優(yōu)化PolicyEngine智能緩存Authentication云安全服務(wù)URLFilterDBProxyClientProxyAV防毒墻DLP/ILP防信息泄露DirectorBlueCoatReporter統(tǒng)計(jì)報(bào)表全方位的安全全與Web流量報(bào)告150種報(bào)表模板，，追蹤所有用用戶的web行為Dashboard?指示盤，直直觀顯示