版權(quán)說(shuō)明：本文檔由用戶提供并上傳，收益歸屬內(nèi)容提供方，若內(nèi)容存在侵權(quán)，請(qǐng)進(jìn)行舉報(bào)或認(rèn)領(lǐng)
文檔簡(jiǎn)介
ManojGuptaFebruary23,2010CheckPointAbra
TechnicalPresentation
PutyourofficeinyourpocketAgenda1Introduction
2Architecture3FeatureFocus4Installation5ConfigurationandManagement6Summary
IntroducingCheckPointAbra
CheckPointAbraPutyourofficeinyourpocketVirtualworkspacethatkeepsmobiledatasecureIdealformobileworkers,contractorsanddisasterrecoveryInstantlyturnanyPCintoyourowncorporatedesktopWhyAbra?WhoNeedsAbra?Why?BlockmaliciouscodefromunknownPCsEveryuser
Mobile.Remote.Home.ContractorsUnmanagedPCsDisasterrecoverySustainproductivityUnsecureconnectionsDatalossComplianceissueswithunmanagedPCsSecurelyaccessandworkwithcorporatedatafromanyPCVirtualWindowsworkspacePlug-and-playwithnosoftwareinstallorsystemrebootrequiredTurnAnyPCIntoYourOwn
CorporateDesktopAbraComponentsCheckPointAbrawithSanDiskenterprisegradeUSBdriveSecureconnectivitythroughCheckPointSecurityGatewaysAbrapolicyconfigurationusingCheckPointNetworkPolicyManagementSoftwareBladeAgenda1Introduction
2Architecture3FeatureFocus4Installation5ConfigurationandManagement6Summary
Abra–VirtualizationEngineSystemComponentSecureWorkspaceComponentDefaultUserAccount:Inmostcases(especiallyinWindowsXP)applicationsrunwithadminrightsandifthehostOSisinfectedtheuserfileswillalsobeinfectedNon-VirtualizedWorkspaceAllchangesaffectthereallocal-systemSecureWorkspaceVirtualizationEngineVirtualfilesystem,virtualregistryWindowssystemDLLstoaccessfilesystem,registry,UI,NTDLL.DLL,USER32.DLLOperatingSystemandkerneldriversKernelUserSpaceEncrypted&VirtualizedEncrypting&VirtualizingAbraTopologyAbraCheckPointSecurityGatewaysHostComputerSmartCenterManagementSecureWorkspaceVPNconnectionAbraissupportedonVPNSoftwareBlade:R65:HFA60andEVE2R70.20(HFA20)ConnectivityflowAbraestablishesSSLVPNtunnelbasedonuserauthenticationSecurityGatewaydeliversAbrapolicyandupdatesoverSSLVPNtunneltotheclientUsertrafficpassesoverSSLVPNtunnel.TheSecurityGatewaydecryptsandforwardsitintocorporatenetworkSSLVPNtunnel(2)Updates(3)Policydelivery(4)UsertrafficCheckPointSecurityGatewaysSecureWorkspaceSecuritythroughSegregationAbraFilesandFoldershavealwaysonHWandSWEncryptionNoresidueisleftontheRAMPCfoldersarenotaccessiblefromAbraPrintingisblockedSwitchingenvironmentsbetweenAbra&PCEncryptedandSegregatedClipboardAbrafoldersarenotaccessiblefromthePCAbrainnon-CPenvironmentTarget:non-CPcustomersNoCPVPNgatewayUsing3rdpartySSLVPNsolutionforRemoteAccessManagedbythestandaloneCPPolicytoolPolicyandupdatesdeliveredthroughacorporateWebserverConnectstothe3rdpartySSLVPNPasswordresetsupportAbraStand-AloneDeploymentAbrainnon-CPenvironmentAbra3rdpartySSLVPNvendorHostPCWebserver(AbrapolicyandCAB)SecureWorkspaceVPNconnectionHTTPISWandICSpolicyupdatesAgenda1Introduction
2Architecture3FeatureFocus4Installation5ConfigurationandManagement6Summary
AbraAuthenticationEnforcedStrongPasswordPolicyMandatoryDeviceAuthenticationAbraSecureRemoteAccessAdvancedVPNclientwithauto-connectcapabilitiesSSLencryptionMax500concurrentconnectionsLocationawarenessAlwaysconnectedRoutealltrafficHotspotdetectionandregistrationAccessfilesandapplicationsanywhere,withintegratedVPNAbraProgramControlProgramcontrol(PA)–AllowexecutionofauthorizedapplicationsasdefinedinthepolicyAllowallapplicationsandActiveXcontrolsAllowallexceptPAblacklistAllowbyexenameandmatchingMD5BlockexecutionofunauthorizedprogramsBlockExecutionofUnauthorizedApplicationsAbraFileImport/ExportProvidecontrolleddatatransferbetweenAbraandhostPCPreventdataleakfromAbraSWtothehostsystemPreventFiletransferfromunmanaged/unsecuredhosttoAbraSWControlledbyAbrapolicyUsage:Import:Copy/movefilesfromhostPCtoAbraExport:Copy/movefilesfromAbratothehostPC(ifallowedbyAbrapolicy)
ProtectAgainstDataLossAbraonSanDiskUSBdriveAllfilesstoredsecurelyonencrypted SanDiskUSBdriveAES256bithardwareencryptionAnti-bruteforceprotectionUltrafasttransferspeed20MbpsWrite/25MbpsReadPlug-and-PlaystartupCertifiedFIPS140-2Level2MgmtAgentSecure
FlashSecure
CDCryptographic
Chip
Cryptographic
ChipSecure
FlashSecure
CDMgmtAgentCompliancewithHighestLevelofDataSecurityPasswordResetPasswordtoolinstalledonthesameserverasNetworkPolicyManagementserverThetoolislocatedinSmartDashboardfolder:C:\ProgramFiles\CheckPoint\SmartConsole\...\AbraDashboard.exePasswordmanagementforIThelpdeskpersonnelRemoteHelpForForgottenPasswordAgenda1Introduction
2Architecture3FeatureFocus4Installation5ConfigurationandManagement6Summary
Abraclient-InstallationPre-bundledsolutiononSanDiskUSBdrivewithplug-n-playlightweightarchitectureAutomaticallyupdatesoverSSLtunnelUsersarenotifiedwhennewupdateisavailablePostinitializationprocess,usertocreateapasswordforAbradeviceandsetupVPNconnectivityNoSoftwareInstallationorPCRebootRequiredCheckPointAbra-SecureWorkspaceVPNClientSecuredApplicationsImportdirectoryImport/ExportbuttonDiskspaceandLocationnotificationStandardWindowsEnvironmentProcesseswhenAbraislaunchedSanDisk’sloginprocessSanDiskProcessthathidestheremovabledriveVPNClientprocessVPNGUISecureWorkspaceAgenda1Introduction
2Architecture3FeatureFocus4Installation5ConfigurationandManagement6Summary
AbrawithCheckPointVPNSoftwareBladeCustomerswithexistingCPinfrastructureAbraestablishesSSLtunnelwithCheckPointVPNsoftwarebladeAbrapolicyisconfiguredandmanagedthroughNetworkPolicyManagementSoftwareBladeAbraupdatesaredeliveredviaVPNtunnelSimpleSetupandAdministrationwithexistingManagementGatewaysidecomponentsR65R70StandaloneConfigurationR65.4HFA60Eve2HotfixR70.20DistributedConfigurationModuleHFA60Eve2HotfixR70.20ManagementR65.4HFA60Eve2hotfixR70.20SmartConsoleEve2R70.20
CentralManagement
VPNConnectivitysettingsAuthenticationrulesCentralPolicyConfigurationandUpdateConfigure&ManageAbrafromNetworkPolicyManagementSoftwareBladeAbraSecureWorkspacePolicyIsolatealluserfilesandpreventdatalossBlockmaliciouscodefromunauthorizedapplicationsKeepingMobileDataSecureControloutboundtraffictohelppreventdatalossAgenda
溫馨提示
- 1. 本站所有資源如無(wú)特殊說(shuō)明，都需要本地電腦安裝OFFICE2007和PDF閱讀器。圖紙軟件為CAD,CAXA,PROE,UG,SolidWorks等.壓縮文件請(qǐng)下載最新的WinRAR軟件解壓。
- 2. 本站的文檔不包含任何第三方提供的附件圖紙等，如果需要附件，請(qǐng)聯(lián)系上傳者。文件的所有權(quán)益歸上傳用戶所有。
- 3. 本站RAR壓縮包中若帶圖紙，網(wǎng)頁(yè)內(nèi)容里面會(huì)有圖紙預(yù)覽，若沒有圖紙預(yù)覽就沒有圖紙。
- 4. 未經(jīng)權(quán)益所有人同意不得將文件中的內(nèi)容挪作商業(yè)或盈利用途。
- 5. 人人文庫(kù)網(wǎng)僅提供信息存儲(chǔ)空間，僅對(duì)用戶上傳內(nèi)容的表現(xiàn)方式做保護(hù)處理，對(duì)用戶上傳分享的文檔內(nèi)容本身不做任何修改或編輯，并不能對(duì)任何下載內(nèi)容負(fù)責(zé)。
- 6. 下載文件中如有侵權(quán)或不適當(dāng)內(nèi)容，請(qǐng)與我們聯(lián)系，我們立即糾正。
- 7. 本站不保證下載資源的準(zhǔn)確性、安全性和完整性, 同時(shí)也不承擔(dān)用戶因使用這些下載資源對(duì)自己和他人造成任何形式的傷害或損失。
最新文檔
- 公開課教案教學(xué)設(shè)計(jì)課件人教初中語(yǔ)文八下《詩(shī)五首行路難(其一)》課件-(二)
- 高中新課標(biāo)化學(xué)二輪總復(fù)習(xí)《元素周期表及其應(yīng)用》課件共張課件
- 五年級(jí)下冊(cè)心理健康教案-33《放松心情》 北師大版
- 做賬實(shí)操-茶葉廠賬務(wù)處理的實(shí)際案例
- SDBXM 055-2024不動(dòng)產(chǎn)登記窗口服務(wù)規(guī)范
- 中班語(yǔ)言大果盤課件
- 北海市重點(diǎn)中學(xué)2021-2022學(xué)年物理高一下期末教學(xué)質(zhì)量檢測(cè)試題含解析
- 安徽省安慶市大觀區(qū)第一中學(xué)2022年物理高一第二學(xué)期期末教學(xué)質(zhì)量檢測(cè)模擬試題含解析
- 2022年浙江教育綠色評(píng)價(jià)聯(lián)盟物理高一下期末預(yù)測(cè)試題含解析
- 2022年銀川第二中學(xué)物理高一下期末監(jiān)測(cè)試題含解析
- 瑞安課題管理手冊(cè)（新版）
- 人防工程安全應(yīng)急預(yù)案
- 電動(dòng)滾筒說(shuō)明書
- 野外地質(zhì)工作巖石描述大全
- 2022年154號(hào)文附件一：《江蘇省建設(shè)工程費(fèi)用定額》營(yíng)改增后調(diào)整內(nèi)容
- SCH-壁厚對(duì)應(yīng)表(SH3405B3610)
- 多維閱讀第3級(jí)—Caterpillar, Caterpillar 聰明的毛毛蟲 課件
- 完整word版入加拿大入境卡
- 肺功能報(bào)告解讀ppt課件
- 竹漿黑液管式降膜蒸發(fā)器結(jié)垢解析
- (完整版)擬投入的主要施工機(jī)械、設(shè)備計(jì)劃
評(píng)論
0/150
提交評(píng)論