1、 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 1思科网络准入控制管理Network Access Control (NAC) 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 2 安全趋势与网络准入控制 思科网络准入控制管理简介 思科网络准入控制功能介绍 思科网络准入控制部署和应用议程 2006 Cisco Systems, Inc. All rights reserve
2、d. Cisco ConfidentialPresentation_ID 3全球电子犯罪率上升迅速！ Malicious Software Strains exploded from 30K/40K per month to 170,000 from February to March 2008 Phishing e-mails doubled 400,000 a day in August to nearly 800,000 a day in November) Ads for stolen identity information doubled or tripled in price i
3、n Fall 2008 (stolen identity that once cost $5, for instance, now sells for $15). Over 100 million credit/debit card transactions compromised due to malware at a large US Payment Processor possibly the largest data breach to date (WashingtonP - Jan 20, 2009) “Theres been a marked increase in the num
4、ber of attacks and the number of successful fraud attemptsThis is the busiest practice has ever been.” Gartner 2008 “In periods of recession or slow growth, companies are going to turn their attentions to customer retention rather than customer acquisitionThe last thing you need in that environment
5、is a data breach and the associated brand damage.“ Forrester 2008 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 4企业重要数据泄漏统计Unauthorized application use: 70% of IT say the use of unauthorized programs result in as many as half of data loss incidents.Misuse of corpora
6、te computers: 44% of employees share work devices with others without supervision. Unauthorized access: 39% of IT said they have dealt with an employee accessing unauthorized parts of a companys network or facility. Remote worker security: 46% of employees to transfer files between work and personal
7、 computers. Misuse of passwords: 18% of employees share passwords with co-workers. That rate jumps to 25 percent in China, India, and Italy. 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 5终端应用安全现状Windows, Linux笔记本电脑、台式机或 PDA打印机或其他公司资产系统环境复杂公司员工合同商访客未知人员人员复杂VPN局域网WLA
8、N广域网网络环境复杂防病毒，防间谍软件个人防火墙修补工具安全工具实施难度大终端遭受严重安全威胁，各种恶意代码攻击，如病毒、蠕虫、木马及混合安全威胁，非法访问，黑客攻击如何防范？ 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 6网络准入控制 NAC 用户受益威胁控制 减少终端感染 减轻 IT查毒负担 增强网络复原力细粒度访问控制 减少安全事故 防敏感数据泄漏行业规范遵从 提高安全性 满足安全审计需要提高运维效率 便捷的访客网络 设备自动识别和监控网络准入控制的好处 2006 Cisc
9、o Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 7Source: Infonetics Research, May 2008网络准入控制实例统计0% 20% 40% 60% 80% 100%Limit the impact of security problems, stop threats from propagatingProtect against loss of sensitive/personal informationIncrease overall corporatesecurity p
10、ostureControl network access basedon user identity and roleReduce risk of allowing alldevices to connect to my networkDemonstrate compliance to security/access policiesProtect against lossof intellectual propertyDrivers83%76%76%74%73%70%61% 2006 Cisco Systems, Inc. All rights reserved. Cisco Confide
11、ntialPresentation_ID 8 安全趋势与网络准入控制 思科网络准入控制管理简介 思科网络准入控制功能介绍 思科网络准入控制部署和应用议程 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 9思科网络准入控制 NAC 领先、创新！4000+ customers41% market share11 Infonetics, June 20082 Frost & Sullivan April 2008, Gartner March 2008, IDC Dec 2007, Inf
12、onetics June 20083 April 2008 http:/ MayGold Award: Information Security Readers Choice Awards3#1 NAC Vendorleading analysts2Pioneered NAC launched in 2004 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 10业务策略治理Governance2003 20092004: $92m2006: $207m安全访客登录Secure Gue
13、st用户身份识别User Identity设备特征识别Device ProfilingWhoareyou?Whatson yourdevice?What otherdevices areconnected?Who else isconnecting?What are theconditionsof access?2005: $131m2007: $354mMarket Size(source: IDC, June 2007)Value-Add 安全状态评估Posture AssessmentFirst to the marketComprehensive solutionFlexible deployment choices and options思科网络准入控制 NAC 领先、不断创新！2008: $570m
