1、思科安全產(chǎn)品銷售培訓(xùn),Version: 20071125,徐震 安全產(chǎn)品經(jīng)理 2020/7/29,內(nèi)容安排,思科ASA安全產(chǎn)品簡述及市場競爭態(tài)勢分析 如何體現(xiàn)思科ASA安全產(chǎn)品的技術(shù)優(yōu)勢? 如何提升安全產(chǎn)品的Attach Rate? 如何提升代理商的利潤空間,UTM 市場一覽,IDC定義，譯成由硬件、軟件和網(wǎng)絡(luò)技術(shù)組成的具有專門用途的設(shè)備，它主要提供一項(xiàng)或多項(xiàng)安全功能， 它將多種安全特性集成于一個(gè)硬設(shè)備里, 構(gòu)成一個(gè)標(biāo)準(zhǔn)的統(tǒng)一管理平臺 直說就是： FW （防火墻） + VPN（虛擬專用網(wǎng)）+IPS（入侵防護(hù)）+ AV （網(wǎng)關(guān)防毒）,UTM之廠商比較,Cisco ASA 5500 Series

2、Adaptive Security Appliances,Teleworker,Branch Office,InternetEdge,ASA 5550 (1.2 Gbps, 36K conn/s),ASA 5580-20 (5-10 Gbps, 90K conn/s),ASA 5580-40 (10-20 Gbps, 150K conn/s),ASA 5505 (150 Mbps, 4K conn/s),Cisco ASA 5580: Extends Market-leading Family to the Data Center,Data Center,ASA 5540 (650 Mbps,

3、 25K conn/s),ASA 5520 (450 Mbps, 12K conn/s),ASA 5510 (300 Mbps, 9K conn/s),Campus,Cisco ASA 5500 Platforms,SSG appliances: SSG 5/20/140 SSG 320/350 SSG 520/550 Netscreen appliances: NS 5GT, 25, 50 NS 204, 208, 500 NS 5200 and 5400 IDP and ISG appliances: IDP 50, 200 IDP 600, 1100 ISG 1000, 2000 (wi

4、th IDP),SSL VPN 接入: Secure Access 700 Secure Access 2000, 4000 Secure Access 6000, 6000 SP 訪問控制: Steel Belted Radius Odyssey Access Client Infranet Controller 4000, 6000 安全管理: J-Security Center Central (SSL) Manager Netscreen Security Manager,注意：NS系列為之前Netscreen的產(chǎn)品，僅有Firewall/IPSEC VPN功能，SSG/ISG為UTM

5、產(chǎn)品,當(dāng)前Juniper安全產(chǎn)品一覽,Juniper SSG系列產(chǎn)品的定位,SSG仍采用原有Netsreen的OS(基于Vxworks)， 提供軟件轉(zhuǎn)換（可轉(zhuǎn)換至JUNos); 可作傳統(tǒng)的防火墻使用； SSG開始集成UTM功能； 增加了部分IPS(軟件實(shí)現(xiàn))、病毒防護(hù)、防垃圾郵件等功能 SSG支持部分廣域網(wǎng)接口； 可作為安全路由器(類似ISR Security Bundle),SSG 5,SSG 20,SSG 140,SSG 550M,SSG 520M,SSG 320M,SSG 350M,Juniper ISG 系列產(chǎn)品,共兩個(gè)型號:ISG1000/ISG2000,為原Netscreen產(chǎn)品;

6、 與SSG最大的區(qū)別在于提供硬件的IDP模塊; 可作傳統(tǒng)防火墻使用; 部分集成了UTM功能; 新建連接20000、23000/秒,ISG1000,ISG2000,SSG/ISG 系列與Cisco產(chǎn)品大致對應(yīng)關(guān)系,ASA5580發(fā)布之前，一般用ISG 1000與ASA5540/50 對應(yīng)，ISG2000與ASA5550/FWSM對應(yīng) ASA5580發(fā)布后后，建議用ISG 1000對應(yīng)FWSM/ASA5550/80-20,用ISG2000對應(yīng)FWSM/ASA5580-20/40;,JNPR s FW street price of Mar 25, 2008,內(nèi)容安排,思科ASA安全產(chǎn)品簡述及市場競

7、爭態(tài)勢分析 如何體現(xiàn)思科ASA安全產(chǎn)品的技術(shù)優(yōu)勢? 如何提升安全產(chǎn)品的Attach Rate? 如何提升代理商的利潤空間,12,12,12,思科ASA5500專用安全硬件擴(kuò)展模塊,Cisco ASA 5500 SeriesAdvanced Inspection and Prevention Module (AIP SSM),High-Performance Module for Additional Services,Thumbscrews for EasyInsertion and Removal,Gigabit Ethernet Port forOut-of-Band Management

8、, Etc.,Diskless (Flash-Based) Design for Improved Reliability,Cisco ASA 5500 SeriesAdvanced Inspection and Prevention Module (AIP SSM),不斷升級的安全威脅 內(nèi)容及網(wǎng)絡(luò)安全的必要性,鎖住了網(wǎng)絡(luò)（層）之門, 但電子郵件及網(wǎng)頁門仍然洞開,網(wǎng)絡(luò)安全,內(nèi)容安全,端口 25,端口 80,Innovative Security for Unified Communications Protect Cisco Communication Manager and IP Phone

9、s,Ensure SIP, SCCP, H.323, MGCP requests conform to standards Prevent inappropriate SIP Methods from being sent to Communication Manager Network Rate Limit SIP Requests Policy enforcement of calls (whitelist, blacklist, caller/called party, SIP URI) Dynamic port opening for Cisco applications Enable

10、 only “registered phones” to make calls Enable inspection of encrypted phone calls,Cisco ASA with SSL VPN,Cisco Security Agent (CSA),Cisco ASA with VPN,Cisco ASA with IPS and VPN,Protection Against Attacks On Unified Communications Call Control, Endpoints And Applications,使用統(tǒng)一VPN接入系統(tǒng)滿足各種客戶需求,Public

11、Internet,ASA 5500 VPN Edition,網(wǎng)頁定制化的SSL VPN接入,網(wǎng)頁定制化SSL VPN接入,隧道模式的SSL或IPSec VPN LAN接入,商業(yè)合作伙伴的VPN接入,Requires “l(fā)ocked-down” access to specific extranet resources and applications,出差員工的遠(yuǎn)程接入服務(wù),Remote access users require seamless, easy to use, access to corporate network resources,第三方平臺臨時(shí)接入服務(wù),Remote use

12、rs may require lightweight access to e-mail and web-based applications from a public machine,遠(yuǎn)程分支機(jī)構(gòu)以及SOHU型用戶的LAN接入,Day extenders and mobile employees require consistent LAN-like, full-network access, to corporate resources and applications,隧道模式的SSL或IPSec VPN客戶端接入,ASA SSL VPN 的機(jī)會(huì)分析,We do can make more money with SSL VPN solution We have good chance to win this market, with ASA 8.0 released/Public Demo Site We are not only SSL VPN gateway, we also support firewall and IPsec VPN,Juniper SSG140與Cis