Cybercrime & Effective Gateway Anti-Malware Protection Juniper & Kaspersky Lab Mohammed Hussain & Matthew Robinson

Sophistication.. 03/07/2019

Scareware Demo.. 03/07/2019

Demo illustrates how Malware is becoming more sophisticated.. Two aspects: technical and social engineering Technical: for example.. User visits legitimate website Malicious code secreted to redirect; GUI runs in browser ‘Drive by download’; use of exploits, silent install of malware Social engineering: for example.. New techniques Better craftsmanship and execution 03/07/2019

03/07/2019

03/07/2019

03/07/2019

Is end point protection effective? The human element Guest & legacy systems Vendor technical problems Poor performance Questionable protection 03/07/2019

Multi-layered approach reduces exposure Intercept all routed traffic and check it for malware Gateway protection layer Mail systems protection layer Network Services and Workstations protection layer Gateway E-mail Servers Workstations Network Servers Internet 03/07/2019

ScreenOS Juniper Branch Products SSG, SRX, and J Series Products Unified Threat Management Full IDP Kaspersky Antivirus Web filtering VoIP Juniper OpenCommunications Power over Ethernet FW, VPN, NAT, UAC SSG Family FW, VPN, NAT, UAC IPv6 Security Wireless (WLAN) Unified Threat Management Intrusion Prevention: DI Kaspersky Antivirus Web filtering J Series FW, VPN, NAT, UAC Routing, Switching, QOS, MPLS WX—ISM 200 Application Acceleration VoIP Unified Threat Management Full IDP Kaspersky Antivirus Web filtering SRX 100 SRX 210 SRX 240 SRX 650 SSG20 Wireless J2320 SSG5 Wireless SSG140 SSG320M J2350 SSG520 SSG520M J4350 SSG350M ScreenOS SSG550 SSG550M J6350

Kaspersky AV for Juniper Networks Available on SSG, SRX, and J-Series Stand-alone Kaspersky AV UTM (anti-virus, anti-spam, Web filtering, IPS) On Juniper Networks price list Full AV or Express AV options on SRX Full AV (better coverage) Express AV (faster processing)

Kaspersky AV for Juniper Networks (cont.) Protect against viruses in email (SMTP, POP, IMAP protocols), webmail (HTTP) and FTP traffic Integrated AV engines and virus signature databases – updated periodically, available via AV subscription license Full AV Kaspersky engine and database File-based scanning High detection – comprehensive database contains signatures of current/ recent/ widespread/ critical viruses Express AV Juniper engine, Kaspersky database Packet-based scanning with hardware acceleration – Content Security Accelerator (CSA) High performance, lightweight – smaller database than file-based AV’s

I agree, gateway anti-malware makes perfect sense. It means.. Harder for malware to penetrate my network and cause damage The risks of having desktop-only protection are mitigated I may see better network performance .. [ ] 03/07/2019

I agree, gateway anti-malware makes perfect sense. But.. .. why Kaspersky & SSG/SRX? .. I’m concerned about network performance .. I already have a gateway AV solution in place .. [ ] 03/07/2019

Why Kaspersky..? AV is not a commodity. In today’s climate of fast increasing levels of sophisticated malware and targeted threats, you need the best possible protection. Why compromise? Kaspersky Lab offers the world’s most immediate protection - highest frequency of updates (hourly) - fastest response time to new threats - consistently the best detection rates - unmatched unpacking technology 03/07/2019

Small updates for the Best Possible Protection and User Experience Average number of updates per day Fast spreading viruses and worms achieve 100% penetration in less than a few hours. Responding quickly and accurately with new signatures is critical to minimize the window of vulnerability and provide proactive protection. 03/07/2019

Fast Response Ensures the Shortest ‘Window of Opportunity’ 03/07/2019

Consistently High Detection Detection of a representative set of malware discovered in the last 2-3 months (AV-Test reference set) Source: AV-Test.org – May 2011 Results 03/07/2019 PAGE 18 | 18 18

AV-Test KIS 2012 – Zero Day Attacks Protection against 0-day malware attacks from the Internet, including web and e-mail threats Source: AV-Test.org – May 2011 Results 03/07/2019 PAGE 19 | 19 19

Support for 4000+ Archiving and Compression Formats 03/07/2019

International awards The largest number of industry awards from IT publications and malware testing organizations globally 03/07/2019

Comparative Analysis Here’s how Kaspersky solutions perform vs. their competitors in the industry: Criteria Kaspersky Lab Symantec McAfee Trend Micro Sophos Panda AVG AV-Comparatives: Approved 2010 Corporate Product Yes No AV-Comparatives: Feb’ 11 On-Demand Comparative Test Advanced+ Advanced Standard AV-Comparatives: Dec’ 09 Performance Test Score 193 188 174 Not incl. 164 AV-Comparatives: May’11 Retrospective / Proactive Test Few false alarms Proactive DR: 55% Not Included Few false alarms Proactive DR: 23% Many false alarms Proactive DR: 52% AV-Comparatives: 2010 Overall Whole Product Dynamic Test AV-Comparatives: Oct’ 09 Removal Test VB100: Apr’11 Reactive and Proactive Protection (RAP) Score 94.56% 88.58% 84.71% 89.14% 92.55% VB100: Successful Results In Total 64 56 48 16 57 1 37 AV-test.org Q2-2011, Protection/Repair/Usability score 5.5 / 5.5 / 5.0 5.0 / 5.0 / 3.5 3.0 / 3.0 / 3.5 Failed! 4.5 / 3.5 / 4.5 4.0 / 4.5 / 5.0 5.5 / 5.0 / 5.0 5.5 / 4.5 / 3.0 Worldwide System Infrastructure Software Revenue, 2009 Growth 42.0% -4.8% 1.8% 6.7% 25.9% -6.2% 31.0% 03/07/2019

And.. Full & Express AV options help alleviate latency concerns Manage device/s from a single vendor, not multiple Hardened operating system is more secure Potentially more cost effective to consolidate: easier to deal with a single vendor rather than deal with multiple vendors, support channels, commercial agreements, etc. Straightforward to switch on AV – no messy installs or configuration Thirty day AV trial license .. [ ] 03/07/2019

Final point.. There is a BIG opportunity! 03/07/2019

Final point.. There is a BIG opportunity! ‘Money on the table’; great potential to realise more revenue Simply quoting up front increases the attach rate UTM/AV subscription is ‘sticky’ Fantastic opportunity to maximise return on existing customer base .. [ ] 03/07/2019

Questions? 03/07/2019