slide1 l.
Download
Skip this Video
Loading SlideShow in 5 Seconds..
Ray Wizbowski VP Marketing rwizbowski@forescout.com PowerPoint Presentation
Download Presentation
Ray Wizbowski VP Marketing rwizbowski@forescout.com

Loading in 2 Seconds...

play fullscreen
1 / 19

Ray Wizbowski VP Marketing rwizbowski@forescout.com - PowerPoint PPT Presentation


  • 135 Views
  • Uploaded on

Enterprise Grade NAC Customer Driven – Global Deployment Proven. Ray Wizbowski VP Marketing rwizbowski@forescout.com. Network Access Control . Access Issues CIOs Worry About*. Who is connecting to my network and are they compliant with my security policies?.

loader
I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
capcha
Download Presentation

PowerPoint Slideshow about 'Ray Wizbowski VP Marketing rwizbowski@forescout.com' - adeola


An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript
slide1

Enterprise Grade NAC Customer Driven – Global Deployment Proven

Ray WizbowskiVP Marketingrwizbowski@forescout.com

network access control
Network Access Control

Access Issues CIOs Worry About*

Who is connecting to my network and are they compliant with my security policies?

Is there a self propagating threat on any device connecting to my network?

Am I leveraging access control to gain more automation of IT processes?

*Research by

Enterprise Demand Research: Network Access Control, June 2006

© 2000 - 2006 ForeScout Technologies, Inc.

network access control3
Network Access Control

Market Overview

Product Challenges

Market Awareness

Focused Development

Wait for Cisco or Microsoft?

CounterACT

Created Market Demand

Products Have Faced Delays

Demonstrated Product is Immature

Requires Major Infrastructure Investment

No Integrated IPS

Agent Based

OS Limitations

Completely Clientless

Integrated IPS

Not Inline

Works with Existing Infrastructure

© 2000 - 2006 ForeScout Technologies, Inc.

counteract delivers
CounterACT Delivers

Network Access. Controlled.

Do Not

Disrupt

?

Universal Discovery

End Point X-Ray

Non Disruptive

Tailored Enforcement

© 2000 - 2006 ForeScout Technologies, Inc.

universal discovery

All Devices Detected Upon Network Connection

  • Completely Clientless

No Software/Code Required on Endpoints

  • Delivers Automatic Handling of ALL Devices
  • Guests, Contractors, Printers, VoIP Devices, etc

EnablesGlobal Scalability

  • Integrates with Existing Directory Structures

CounterACT Works with Existing Domain

  • Treats Domain or Non-Domain Users Differently in Accordance with Defined Policies

?

Universal Discovery

Universal Discovery

Enforce Policy on ALL Devices

© 2000 - 2006 ForeScout Technologies, Inc.

end point x ray

Instantly Detects/Blocks Self Propagating Threats

  • IfDevice is Company Managed CounterACT Can…

Utilize ForeScout Fast Pass™

  • No Quarantine by Default Requirement
  • Allows Device Immediate Connection while…

Deep Interrogation of Device is Completed

  • Ensure Policy Compliance of Connected Device
  • Custom Fit Enforcement Options Bring Users Into Compliance without Affecting Productivity

End User Experience is Not Effected

End Point X-Ray

End Point X-Ray

Blocks Network Disrupting Code

© 2000 - 2006 ForeScout Technologies, Inc.

tailored enforcement

Full Spectrum of Policy Enforcement Options

  • Appropriate Response to Each Policy Violation
  • Disruption Directly Related to Degree of Violation

Customized Policy Enforcement with CounterACT

  • Business Dictates Level of Enforcement
  • Custom Enforcement for User Type

Not Binary

  • Provides Multiple Limited Disruption Enforcement Options
  • End User Can Remain Productive While Minor Policy Violations are Addressed

Tailored Enforcement

Tailored Enforcement

Custom Fit To Your Business Needs

© 2000 - 2006 ForeScout Technologies, Inc.

non disruptive

Non-Disruptive Deployment

  • Not-Inline Deployment
  • Typically Spanned From Distribution Layer Switch

Non-DisruptiveManagement

  • NAC System Does Not Require Continual Monitoring
  • Simple Format for Updating/Changing Policies

Non-DisruptiveAccess

  • Fast Pass™ Enables Instant Access to Network Resources, without Compromising Security
  • Allows Contractors/Guests Access According to Policy Without Physical Adjustment to Network

Do Not

Disrupt

Non Disruptive

Non Disruptive

Deploy NAC without Disruption

© 2000 - 2006 ForeScout Technologies, Inc.

counteract 6 0
CounterACT 6.0

Enterprise Grade NAC Features

NEW

Features

  • Remote Application Termination
  • High Availability
  • Product Line Expansion
  • SMS Integration
  • MAC OS Interrogation

Features

  • Advance Policy Creation
  • Rapid Deployment Model

IMPROVED

© 2000 - 2006 ForeScout Technologies, Inc.

application termination
Application Termination

Customer Need

Greater control over high risk applications

CounterACT Provides

Ability to determine what applications are running

Remote termination of application

Ability to notify the user using their browser

© 2000 - 2006 ForeScout Technologies, Inc.

high availability
High Availability

Customer Need

Automatic failover if the primary appliance fails

CounterACT Provides

Active-Passive Configuration – if primary fails HA device automatically assumes role as primary

Virtual – the cluster has just one IP address

Transparent and Seamless

© 2000 - 2006 ForeScout Technologies, Inc.

counteract expansion
CounterACT Expansion

Meeting Global Enterprise Needs

Customer Need

Network access control solutions for remote office and headquarters

CounterACT Product Family

CTR – Managing up to 50 devices List price $4,995

CT100 – Managing up to 250 devices List price begins at $13,995

CT1000 – Managing up to 1000 devices List price begins at $28,995

CT2000 – Managing up to 2500 devicesList price begins at $48,995

© 2000 - 2006 ForeScout Technologies, Inc.

advanced policy creation
Advanced Policy Creation

Customer Need

Simplified policy engine

CounterACT Provides

Multi-trigger policy creation - admission, scheduled, and on-demand

Granular policy creation using conditional logic

Enforcement is custom fit for each policy violation in the policy string

© 2000 - 2006 ForeScout Technologies, Inc.

rapid deployment model
Rapid Deployment Model

Customer Need

Ability to deploy multiple CounterACT appliances without having to configure each appliance

CounterACT Provides

From Enterprise Manager, push tuning configuration settings to new appliances

Eliminates network specific tuning of the new appliance

© 2000 - 2006 ForeScout Technologies, Inc.

additional 6 0 functionality
Additional 6.0 Functionality

MAC OS Device Interrogation

SMS Integration

  • MSFT System Management Server

New Reporting Engine

  • Compliance trend reporting

Additional Supported Switches

  • In addition to Cisco, Juniper, Foundry and Extreme, CounterACT will also support Nortel and HP ProCurve

© 2000 - 2006 ForeScout Technologies, Inc.

summary
Summary

Developing/Deploying NAC for Two Years

  • In Production Networks for Over a Year

Customers Have Pushed Development

  • Real customers working with deployed technology

CounterACT NAC Solution is

Enterprise Grade

  • Customer Driven, Global Deployment Proven

© 2000 - 2006 ForeScout Technologies, Inc.

thank you

Thank You

ForeScout Technologies 10001 N. De Anza Blvd., Suite 220Cupertino, CA 95014(408) 213-3191

© 2006 ForeScout Technologies SMQ306

company overview
Company Overview

Founded April 2000

Raised $35 Million in Venture Funding

  • Amadeus Capital, Accel Partners, Pitango Ventures, Meritech Capital Partners, and Itouchu

Headquartered in Cupertino, CA

Global Sales & Marketing Organization

  • Working through channels with direct touch in 2006
  • Growth will be facilitated through expanding channels in 2007

Over 350 Customers

Focused Channel Program

  • Have recruited top security integrators in US and Europe
  • Fishnet Security, Vigilar, Integralis, Axial, etc.

© 2000 - 2006 ForeScout Technologies, Inc.

forescout s product families

CounterACT

  • Clientless Network Access Control
    • Universal Discovery
    • End Point X-Ray
    • Tailored Enforcement
    • Non Disruptive

Internal Security

ActiveScout

  • Signatureless Intrusion Prevention
    • Zero-Day Threat Mitigation
    • No Updates
    • Minimal Maintenance

Perimeter Defense

ForeScout’s Product Families

© 2000 - 2006 ForeScout Technologies, Inc.