CCNSP v3 0el Module 1

Cyberoam Certified Network & Security Professional (CCNSP)
WELCOME
training.cyberoam.com
Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Trainer Introduction
Ajay Nawani (AJ)

AVP (Global Presales Operations)
Email-id: ajay.nawani@cyberoam.com

Welcome to CCNSP Training
Please Introduce Yourself

- Your name
- Your company, position, and
responsibilities
- Your network experience
- Specific UTM appliance or Cyberoam
product experience

Training Kit
Verify your take away

- Cyberoam Brochure/Techsheets
- Writing Aids
- Cyberoam Paper Bags

Schedule / Breaks (Variable)
Sessions starts at 09:00 hours

Breaks
- Coffee Break (around 11:00 hours)
- Lunch (around 13 hours)
- Coffee Break (around 15:30 hours)
Sessions ends at 17:00 hours

Training Pre-requisites
The training programme assumes

participants to have operational
familiarity with following concepts
- Operational OS understanding
- Networking Basics
- Protocols like HTTP/HTTPS, IMAP, POP3,
SMTP
- TCP/IP Protocol Suite
- Network Security Fundamentals

Training Process Introduction
Verify your Registration on Cyberoam eConnect, if not

Register before starting training.
From the invitation mail, click on

register link to register for CCNSP
Training.

Registration is mandatory for each attendee as registration

will enable Cyberoam Global Training Team to ensure all the
training processes for registered attendee like
- Exam
- Certificate Management, etc
Note: Due care should be taken to enter correct NAME and

EMAIL on the registration form
- The same email will be used for all further communication from Cyberoam
- The given Name will be printed on the certificate on as-is basis.

Registration Screen from eConnect.

Get your Registration Email

Ask the trainer to enroll, Get your enrollment email.

Login to eConnect, download your training material

Login to eConnect, download your training material

Go Ahead !!! Gear up for your Training.
Welcome Aboard to Cyberoam CCNSP Training
CyberoamCertified
CertifiedNetwork
Network&&Security
SecurityProfessional
Professional(CCNSP)
(CCNSP)
Cyberoam
Module 1
Cyberoam Product Overview

Cyberoam Product Overview > Agenda
Evolution of Firewalls
Cyberoam Overview
CCC (Cyberoam Central Console)
CCMS (Cyberoam on Cloud Management Service)
Cyberoam iView

- A Firewall can be hardware or software, used to secure network access
- Previously, Companies would place their systems directly on the Internet with
a public IP address.
- Later, border router connected the Internet to the local network
- Need for better security gave rise to new types of firewalls for an Internetenabled office

Evolution of Firewalls > Packet Filters
- Filters packets based on Source/Destination IP, Source/destination port, and
on a packet-per-packet basis
- Provides the minimum amount of required security.
Destination
port 80
Destination
port 8080

Evolution of Firewalls > Application Filters
- Situated between protected network and the Internet
- Secure, because entire packet, including the application portion of the packet,
can be completely inspected
- Apart from being Packet filters, they also check for source/destination IP
Destination IP
192.18.1.1:80
Destination IP
192.18.1.1:8080

Evolution of Firewalls > Stateful Inspection
- Monitors the state of a communication.
- Not only work as packet filter and application proxies, but also maintain the
state, meaning that the packet goes via the similar route in which it was
received.
- Advantage - it does not check any rule on sending the response packet.
Destination
session live
Destination
session expire

Evolution of Firewalls > UTM
- It is a firewall device with all security features bundled in a single product.
- Traditional UTM functions as a network firewall, network intrusion prevention
system, anti-virus, anti-spam, VPN solution, filtering web content solution and
load balancing solution in one box.
- Can also generate reports, and maintain the state
No Virus
Found virus

Evolution of Firewalls > UTM > Pros and Cons
- Can be deployed as a single appliance, taking control of network as a single
Rack mounted appliance.
- Is capable of generating reports, but becomes essential to connect the UTM

appliance to a reporting server.
- There is a need to secure the reporting server, especially from external
attacks.
- If the reporting server goes down, it becomes difficult to maintain and fetch
report.

Evolution of Firewalls > UTM > Challenges with current UTM
Unable to Handle Dynamic Environments

- Wi-Fi
- DHCP
Lack of user Identity recognition and control

- Inadequate in handling threats that target the user Phishing, Pharming
Unable to Identify source of Internal Threats

-
Employee with malicious intent posed a serious internal threat

Indiscriminate surfing exposes network to external threats
50 % of security problems originate from internal threats Yankee Group
Source of potentially dangerous internal threats remain anonymous

Evolution of Firewalls > UTM > Challenges with current UTM ( Continued.. )
Lack of In-depth Features

- Sacrificed flexibility as UTM tried to fit in many features in single appliance.
- Inadequate Logging, reporting, lack of granular features in individual solutions
Unable to Handle Blended Threats

- Threats arising out of internet activity done by internal members of
organization
- External threats that use multiple methods to attack Slammer
Need for Identity based UTM

Cyberoam Overview
Cyberoam iView

Cyberoam
Next Generation UTM: Cyberoam

- Cyberoam is the identity-based UTM solution that offers Integrated Internet
- Security with fine granularity through its unique identity-based policies.
- It offers comprehensive threat protection with:
Identity-based Firewall
VPN -Threat free tunneling
Gateway Anti-Virus & Anti-Spam
Intrusion Prevention System
WAF (Web Application Firewall)
High Availability (HA)
Content Filtering (Web Filter & Application Firewall)
Bandwidth Management
Multi-Link Manager
On-Appliance Reporting
1200+ drilldown reports
Cyberoam > Cyberoams Security Approach

Cyberoam Identity Based Security
Cyberoam is the only Identity-based Unified Threat
Management appliance that provides integrated Internet
security to enterprises and educational institutions through
its unique granular user-based controls.
Cyberoam > Layer 8 Patent Pending Technology
Application
User

Cyberoam > Layer 8 Patent Pending Technology > Firewall

Cyberoam > Appliances
Hardware UTM appliances
Virtual UTM appliances
Small and Remote Offices

CR35wiNG, CR35iNG,
CR25wiNG, CR25iNG,
CR15wiNG, CR15iNG
CRiV-1C, CRiV-2C, CRiV-4C,

CRiV-8C, CRiV-12C
Small and Medium Enterprises

CR300iNG/XP, CR200iNG/XP
CR100iNG, CR50iNG
Large Enterprises (NGFW)

CR2500iNG/XP
CR1500iNG-XP
CR1000iNG-XP
CR750iNG-XP
CR500iNG-XP
Kernel based
virtual machine

- All Cyberoam models ending with XP come with Flexi port options
- Eg: 2500iNG-XP has 5 Flexi Ports

- Flexi Port Options
- 8x1Gbps Copper Ports
- 8*1Gbps Fiber Ports
- 4*10Gbps Fiber Ports

Cyberoam > Features offered with one time sale of appliance (Basic Appliance)
-
Identity-based Firewall
8 x 5 Support for one month from the registration
VPN
SSL VPN
Bandwidth Management
Multiple Link Management

Cyberoam > Features offered with Subscription
- Gateway Anti-Virus Subscription (Anti-malware, phishing, spyware protection
included)
- Gateway Anti-spam Subscription
- Web & Application Filtering Subscription
- Intrusion Prevention System (IPS)
- 8 x 5 support
- 24 x 7 Premium Support
- (WAF)Web Application Firewall **
(Subscription services are available on 1 Year, 2 Years or 3 Years subscription
basis)
**Note: WAF is available in models 25iNG and above


Cyberoam > Features offered with Bundled Subscription
Bundle can be the combination of or all of the following

modules:
-
Gateway Anti Virus

Gateway Anti-spam
Intrusion Prevention System
Web and Application Filter
8 X 5 Support
WAF (Web Application Firewall)

Cyberoam > Bundled Subscription > Types
TVS (Total Value Subscription)

-
Gateway Anti-Virus (Anti-malware, phishing, spyware protection included)

Gateway Anti-spam
Web & Application Filtering
Web Application Firewall (WAF)
Intrusion Prevention System (IPS)
8 x 5 Email, phone and chat Tech Support
SVS (Security Value Subscription)

-

Gateway Anti-spam (Just RBL Based Solution)

Cyberoam > Bundled Subscription > Types (Continued)
TVSP (Total Value Subscription Plus)

-

Gateway Anti-spam
SVSP (Security Value Subscription Plus)

-

Gateway Anti-spam (Just RBL Based Solution)

Cyberoam > Bundled Subscription > Types
CVS (Comprehensive Value Subscription)

-

Gateway Anti-spam
NGFWS (Next Generation Firewall Security Subscription)

-
Available for NGFW devices only

Gateway Anti-spam

Cyberoam > How to Check Subscription?
Appliance & Customer My account


NFR V/S Regular Appliance
Regular Appliance (For End Customer)

- Cyberoam appliance sold to Partner / Reseller for direct customer sale.
- Will be registered once to get 3, 15 days trials for all subscription based
modules.
Not for Resale (NFR) Appliance (Demo Appliance)

- Cyberoam appliance sold to Partner / Reseller for conducting demos.
- Can be registered unlimited number of times under different credentials after
factory reset.
- Will get 3, 15 days trial for all subscription based modules after each
registration.
- Incase of Virtual Appliance, CRiV-TR model is available

Cyberoam > Select the Right Appliance
- Choosing the right product for an organization depends on

-
Number of Concurrent Users

Bandwidth Upload/Download
Number of Servers to be published
Number of VPN tunnels and users
Additional requirements (Authentication, Unified Threat Control, HA)

- Case 1:
- Small Business customer with 15 concurrent users having 4Mbps Internet
Connectivity with 3G as a backup link.
- Customer is looking for a solution to protect network from internal and external
threats as well as to increase employee productivity by blocking unproductive
resources
- Which model of Cyberoam?
CR15iNG or CR15wiNG
- Subscriptions Required
SVS

- Case2:
- Case 1 customer has expanded business in country by opening 4 new
branches. Each branch has got 3-5 internet users accessing central
accounting system hosted at Central Office. Branches also need wireless
connectivity. Internet bandwidth at Central Office also has increased to
12Mbps
- Customer would like to extend Central Office network in secure way to allow
access of accounting system.
- Central Office?
- CR50iNG by considering 15 + 5 (Each Branch) x 4 branches = 35
Concurrent Users
- Branch Offices?
- CR15wiNG
- Subscription?
- Central Office TVS
- Branch Office SVS

- Case3:
- Same customer has created DMZ zone and added 5 business critical servers
to protect from various network attacks. Server includes 1 email server, 1 web
server, 1 FTP server and 2 accounting servers.
- Customer is expecting 100 concurrent users to surf their corporate web
site and approximate 350 emails per day.
- Internet Bandwidth has increased to 20Mbps.
- Customer is looking for replacement of existing device:
- Appliance Model:
- CR100iNG
- Considering 30 additional users (30% of 100 external users) apart
from 35 existing users. This makes total 65 users and email traffic.
- Inbound traffic has increased due to Email & Web Server. This needs
increased new sessions per second.
- Subscriptions:
- CVS

Cyberoam Overview
Cyberoam iView

CCC

- Offer the flexibility of hardware CCC appliances and virtual CCC appliances
- Provide centralized security management across distributed Cyberoam UTM
appliances
- Enables high levels of security for MSSPs and large enterprises.
- Layer 8 Identity-based policies and centralized reports and alerts, CCC
hardware and virtual appliances
- Provide granular security and visibility into remote and branch offices across
the globe.

CCC > Key Highlights
- Centralized Management
- Security Management with Reduced Policy Deployment Time
- Ease and Flexibility of Management
- Security Against Misuse of Administrator Privileges
- Centralized Visibility

CCC > Key Highlights
- Centralized Management
- Security Management with Reduced Policy Deployment Time
- Ease and Flexibility of Management
- Security Against Misuse of Administrator Privileges
- Centralized Visibility

CCC > Appliances
Hardware CCC appliances
CCC15, CCC50, CCC100,

CCC200, CCC500, CCC1000
Virtual CCC appliances
CCCV15, CCCV50, CCCV100,

CCCV200, CCCV500
Kernel based
virtual machine

Cyberoam Overview
Cyberoam iView

CCMS (Cyberoam Cloud Management Service)

Cyberoam Overview
Cyberoam iView

Cyberoam iView

Cyberoam iView > On-Appliance Logging & Reporting
Security
Management
Data
Protection
Forensic
Analysis
Compliance
Management
Identity
Logging
Reporting
Logs & Events

Cyberoam iView > Appliances
Available as:
- In built in Cyberoam UTM series of appliances
- Dedicated Hardware Appliances
CR-iVU200
CR-iVU100
CR-iVU25
- Open Source Software

Next -> Module 2 (Deploying Cyberoam)

CCNSP v3 0el Module 1

Transféré par

Informations du document

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

CCNSP v3 0el Module 1

Transféré par

Droits d'auteur :

Formats disponibles

Cyberoam Certified Network & Security Professional (CCNSP)

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Ajay Nawani (AJ)

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Please Introduce Yourself

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Verify your take away

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Sessions starts at 09:00 hours

Sessions ends at 17:00 hours

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

The training programme assumes

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Verify your Registration on Cyberoam eConnect, if not

From the invitation mail, click on

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Registration is mandatory for each attendee as registration

Note: Due care should be taken to enter correct NAME and

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Registration Screen from eConnect.

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Get your Registration Email

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Ask the trainer to enroll, Get your enrollment email.

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Login to eConnect, download your training material

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Login to eConnect, download your training material

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Go Ahead !!! Gear up for your Training.

Welcome Aboard to Cyberoam CCNSP Training

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

- Provides the minimum amount of required security.

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)

- Is capable of generating reports, but becomes essential to connect the UTM

Copyright 2014 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam Certified Network & Security Professional (CCNSP)