1. Cybercrime & Effective Gateway Anti-Malware Protection
Juniper & Kaspersky Lab
Mohammed Hussain & Matthew Robinson

2. Sophistication..
03/07/2019

3. Scareware Demo..
03/07/2019

4. Demo illustrates how Malware is becoming more sophisticated..
Two aspects: technical and social engineering
Technical: for example..
User visits legitimate website
Malicious code secreted to redirect; GUI runs in browser
‘Drive by download’; use of exploits, silent install of malware
Social engineering: for example..
New techniques
Better craftsmanship and execution
03/07/2019

5. 03/07/2019

6. 03/07/2019

7. 03/07/2019

8. Is end point protection effective?
The human element
Guest & legacy systems
Vendor technical problems
Poor performance
Questionable protection
03/07/2019

9. Multi-layered approach reduces exposure
Intercept all routed traffic and check it for malware
Gateway protection layer
Mail systems protection layer
Network Services and Workstations
protection layer
Gateway
Servers
Workstations
Network Servers
Internet
03/07/2019

10. ScreenOS Juniper Branch Products SSG, SRX, and J Series Products
Unified Threat Management
Full IDP
Kaspersky Antivirus
Web filtering
VoIP
Juniper OpenCommunications
Power over Ethernet
FW, VPN, NAT, UAC
SSG Family
FW, VPN, NAT, UAC
IPv6 Security
Wireless (WLAN)
Unified Threat Management
Intrusion Prevention: DI
Kaspersky Antivirus
Web filtering
J Series
FW, VPN, NAT, UAC
Routing, Switching, QOS, MPLS
WX—ISM 200 Application Acceleration
VoIP
Unified Threat Management
Full IDP
Kaspersky Antivirus
Web filtering
SRX 100
SRX 210
SRX 240
SRX 650
SSG20 Wireless
J2320
SSG5 Wireless
SSG140
SSG320M
J2350
SSG520
SSG520M
J4350
SSG350M
ScreenOS
SSG550
SSG550M
J6350

11. Kaspersky AV for Juniper Networks
Available on SSG, SRX, and J-Series
Stand-alone Kaspersky AV
UTM (anti-virus, anti-spam, Web filtering, IPS)
On Juniper Networks price list
Full AV or Express AV options on SRX
Full AV (better coverage)
Express AV (faster processing)

12. Kaspersky AV for Juniper Networks (cont.)
Protect against viruses in (SMTP, POP, IMAP protocols), webmail (HTTP) and FTP traffic
Integrated AV engines and virus signature databases – updated periodically, available via AV subscription license
Full AV
Kaspersky engine and database
File-based scanning
High detection – comprehensive database contains signatures of current/ recent/ widespread/ critical viruses
Express AV
Juniper engine, Kaspersky database
Packet-based scanning with hardware acceleration – Content Security Accelerator (CSA)
High performance, lightweight – smaller database than file-based AV’s

13. I agree, gateway anti-malware makes perfect sense. It means..
Harder for malware to penetrate my network and cause damage
The risks of having desktop-only protection are mitigated
I may see better network performance
.. [ ]
03/07/2019

14. I agree, gateway anti-malware makes perfect sense. But..
.. why Kaspersky & SSG/SRX?
.. I’m concerned about network performance
.. I already have a gateway AV solution in place
.. [ ]
03/07/2019

15. Why Kaspersky..?
AV is not a commodity. In today’s climate of fast increasing levels of sophisticated malware and targeted threats, you need the best possible protection. Why compromise?
Kaspersky Lab offers the world’s most immediate protection - highest frequency of updates (hourly) - fastest response time to new threats - consistently the best detection rates - unmatched unpacking technology
03/07/2019

16. Small updates for the Best Possible Protection and User Experience
Average number of updates per day
Fast spreading viruses and worms achieve 100% penetration in less than a few hours.
Responding quickly and accurately with new signatures is critical to minimize the window of vulnerability and provide proactive protection.
03/07/2019

17. Fast Response Ensures the Shortest ‘Window of Opportunity’
03/07/2019

18. Consistently High Detection
Detection of a representative set of malware discovered in the last 2-3 months (AV-Test reference set)
Source: AV-Test.org – May 2011 Results
03/07/2019
PAGE 18 | 18 18

19. AV-Test KIS 2012 – Zero Day Attacks
Protection against 0-day malware attacks from the Internet, including web and threats
Source: AV-Test.org – May 2011 Results
03/07/2019
PAGE 19 | 19 19

20. Support for 4000+ Archiving and Compression Formats
03/07/2019

21. International awards
The largest number of industry awards from IT publications and malware testing organizations globally
03/07/2019

22. Comparative Analysis
Here’s how Kaspersky solutions perform vs. their competitors in the industry:
Criteria
Kaspersky Lab
Symantec
McAfee
Trend Micro
Sophos
Panda
AVG
AV-Comparatives: Approved 2010 Corporate Product
Yes No
AV-Comparatives: Feb’ 11 On-Demand Comparative Test
Advanced+
Advanced
Standard
AV-Comparatives: Dec’ 09 Performance Test Score
193
188
174
Not incl.
164
AV-Comparatives: May’11 Retrospective / Proactive Test
Few false alarms Proactive DR: 55%
Not Included
Few false alarms Proactive DR: 23%
Many false alarms Proactive DR: 52%
AV-Comparatives: Overall Whole Product Dynamic Test
AV-Comparatives: Oct’ 09 Removal Test
VB100: Apr’11 Reactive and Proactive Protection (RAP) Score
94.56%
88.58%
84.71%
89.14%
92.55%
VB100: Successful Results In Total 64 56 48 16 57 1 37
AV-test.org Q2-2011, Protection/Repair/Usability score
5.5 / 5.5 / 5.0
5.0 / 5.0 / 3.5
3.0 / 3.0 / 3.5
Failed!
4.5 / 3.5 / 4.5
4.0 / 4.5 / 5.0
5.5 / 5.0 / 5.0
5.5 / 4.5 / 3.0
Worldwide System Infrastructure Software Revenue, 2009 Growth
42.0%
-4.8%
1.8%
6.7%
25.9%
-6.2%
31.0%
03/07/2019

23. And.. Full & Express AV options help alleviate latency concerns
Manage device/s from a single vendor, not multiple
Hardened operating system is more secure
Potentially more cost effective to consolidate: easier to deal with a single vendor rather than deal with multiple vendors, support channels, commercial agreements, etc.
Straightforward to switch on AV – no messy installs or configuration
Thirty day AV trial license
.. [ ]
03/07/2019

24. Final point.. There is a BIG opportunity!
03/07/2019

25. Final point.. There is a BIG opportunity!
‘Money on the table’; great potential to realise more revenue
Simply quoting up front increases the attach rate
UTM/AV subscription is ‘sticky’
Fantastic opportunity to maximise return on existing customer base
.. [ ]
03/07/2019

26. Questions?
03/07/2019