1. Managed Security
Vikas Khanduri CCIE#13516,CCSP,CCDP,CCNP,MCSE

2. Security Security Challenges Security Failure
Verizon Managed Security Offering
Why Verizon

3. State of the Internet
Today 18% of the Internet bandwidth is attack traffic
30,000 hi-jacked computers waiting to attack systems
Rapid expansion of regulatory requirements
laws
2004 1,400 and growing
Speedy updates are essential now
2004 it takes 10 days from known vulnerability to attack
2002 it was 180 days.
MIT study showed that an un-patched NT system can be compromised in only 55 seconds
Computer viruses and hacking took a $1.6 trillion toll on the worldwide economy - $266 Billion in the US

4. Regulatory Challenges
Each of the Regulatory Requirements focus on different data elements :
HIPAA – Medical Information
GLBA – Client Financial Records
Sarbanes-Oxley – Financial Records
SB-1386 – Personally Identifiable Client Information
Regulatory compliance requires:
Confidentiality
Data Integrity
Identification and Authentication (I&A)
Authorization, Access Control and Audit (AAA)
Monitoring and Incident Response
Availabiilty
Training

5. Operational Challenges
Expanding Perimeters?
Remote Access
Secure Storage
Wireless LANs
VoIP
Multi-platform management?
Disparate Networks
Multiple Vendors
Multiple SW License
Multiple staff skill sets
Change Management?
Inventory Control
Latest Patches
Virus Updates
Threat awareness?
Latest Vulnerabilities
Zero-day Attacks

6. Existing Technology
Firewalls and anti-virus don’t provide 100% protection
Every year, 50% of all organizations suffer from a serious security breach
99% of organizations who suffered had both firewalls and anti-virus in place
Source: 2003 CSI/FBI Computer Crime & Research Survey

7. A False Sense of Security
Firewalls and anti-virus
were not capable of stopping any
of the last 4 major
internet attacks
(Add Phishing, Blaster, Sasser, etc.)
In the past all the major viruses passed through the existing Firewall and Anti Virus.

8. Corporate Security Process Failure

9. Verizon Managed Security Offering
Vendor
Monitor
2 Defense
Stateful Inspection
Remote
Access
IDS
VPN
First Line
of Defense
Internet
Corporate
Firewall
Router
Firewall
IPS
WWW, DNS,
Telnet, FTP,
SMTP, RADIUS, Etc
Dial-in
DMZ
4 Defense
IPS
Monitor
Remote Users
3 Defense

10. Internal Security INSIDE Outside Mobile Cache Direct Un Access
Protected
Router
Content Filter
AAA
CSA
Outside
Switch
AS400

11. Internal Security INSIDE Outside Mobile Router Cache Content Filter
Direct Un
Access
Protected
Cache
Secured
Access
Protected
Router
Content Filter
AAA
CSA
Outside
Switch
Monitor
AS400
SSL VPN

12. VPN Premise Watch Data Center Remote Access VZ GSOC VPN Tunnel

13. Value Added Data Services (VADS)
Site3
Site2
MPLS
Non MPLS
VADS Server
Site1
Site4
Remote Access HQ

14. Managed Security Process

15. Why Verizon? Financially stable company Verizon Commitment
Comprehensive security solution set
Account reach
Trusted Partner
Technical Expertise CISSP,CCIE,CCSP,CCDP,CCNP,CCDA,CCNA,MCSE