Network Visibility for Dummies®, Ixia Special Edition
Total Page:16
File Type:pdf, Size:1020Kb
These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. Network Visibility These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. Network Visibility Ixia Special Edition by Lawrence C. Miller, CISSP These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. Network Visibility For Dummies®, Ixia Special Edition Published by John Wiley & Sons, Inc. 111 River St. Hoboken, NJ 07030-5774 www.wiley.com Copyright © 2017 by John Wiley & Sons, Inc., Hoboken, New Jersey No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without the prior written permission of the Publisher. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at http://www.wiley.com/go/permissions. Trademarks: Wiley, For Dummies, the Dummies Man logo, The Dummies Way, Dummies.com, Making Everything Easier, and related trade dress are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates in the United States and other countries, and may not be used without written permission. Ixia and the Ixia logo are trademarks or registered trademarks of Ixia. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc., is not associated with any product or vendor mentioned in this book. LIMIT OF LIABILITY/DISCLAIMER OF WARRANTY: THE PUBLISHER AND THE AUTHOR MAKE NO REPRESENTATIONS OR WARRANTIES WITH RESPECT TO THE ACCURACY OR COMPLETENESS OF THE CONTENTS OF THIS WORK AND SPECIFICALLY DISCLAIM ALL WARRANTIES, INCLUDING WITHOUT LIMITATION WARRANTIES OF FITNESS FOR A PARTICULAR PURPOSE. NO WARRANTY MAY BE CREATED OR EXTENDED BY SALES OR PROMOTIONAL MATERIALS. THE ADVICE AND STRATEGIES CONTAINED HEREIN MAY NOT BE SUITABLE FOR EVERY SITUATION. THIS WORK IS SOLD WITH THE UNDERSTANDING THAT THE PUBLISHER IS NOT ENGAGED IN RENDERING LEGAL, ACCOUNTING, OR OTHER PROFESSIONAL SERVICES. IF PROFESSIONAL ASSISTANCE IS REQUIRED, THE SERVICES OF A COMPETENT PROFESSIONAL PERSON SHOULD BE SOUGHT. NEITHER THE PUBLISHER NOR THE AUTHOR SHALL BE LIABLE FOR DAMAGES ARISING HEREFROM. THE FACT THAT AN ORGANIZATION OR WEBSITE IS REFERRED TO IN THIS WORK AS A CITATION AND/OR A POTENTIAL SOURCE OF FURTHER INFORMATION DOES NOT MEAN THAT THE AUTHOR OR THE PUBLISHER ENDORSES THE INFORMATION THE ORGANIZATION OR WEBSITE MAY PROVIDE OR RECOMMENDATIONS IT MAY MAKE. FURTHER, READERS SHOULD BE AWARE THAT INTERNET WEBSITES LISTED IN THIS WORK MAY HAVE CHANGED OR DISAPPEARED BETWEEN WHEN THIS WORK WAS WRITTEN AND WHEN IT IS READ. For general information on our other products and services, or how to create a custom For Dummies book for your business or organization, please contact our Business Development Department in the U.S. at 877- 409-4177, contact [email protected], or visit www.wiley.com/go/custompub. For information about licensing the For Dummies brand for products or services, contact BrandedRights&[email protected]. ISBN 978-1-119-37949-2 (pbk); ISBN 978-1-119-37959-1 (ebk) Manufactured in the United States of America 10 9 8 7 6 5 4 3 2 1 Publisher’s Acknowledgments We’re proud of this book and of the people who worked on it. Some of the people who helped bring this book to market include the following: Project Editor: Martin V. Minner Business Development Representative: Karen Hattan Senior Acquisitions Editor: Amy Fandrei Production Editor: Antony Sami Editorial Manager: Rev Mengle These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. Table of Contents INTRODUCTION ............................................................................................... 1 About This Book ..........................................................................................1 Foolish Assumptions ...................................................................................2 Icons Used in This Book ..............................................................................2 Beyond the Book .........................................................................................3 Where to Go from Here ..............................................................................3 CHAPTER 1: Improving Your Security Posture ................................... 5 Recognizing the Challenges to Network Security ....................................5 The Digital Warfare Attackers Are Waging ...............................................8 Recognizing Opportunities to Upgrade Network Security ...................10 Case Study: Compliance Mandates Drive Urgent Need for Inline Security ............................................................................11 CHAPTER 2: Focusing First on Visibility .................................................. 13 Looking at the Problem: Too Many Blind Spots, Not Enough Visibility .................................................................................13 Understanding Why You Need Network Visibility .................................14 Evaluating Current Approaches to Visibility ...........................................16 Achieving Total Visibility ...........................................................................17 Leveraging Network Taps to Deliver Superior Visibility ........................18 Getting Visibility into Virtual Traffic .........................................................19 CHAPTER 3: Increasing Efficiency and Flexibility with a Security Fabric ............................................................. 21 Delivering the Right Data, to the Right Place .........................................21 Defining Inline and Out-of-Band Tools ...................................................22 Protecting and Processing Your Data .....................................................24 Understanding the Role of a Security Fabric .........................................25 Tool efficiency ......................................................................................25 Network availability .............................................................................27 Security resilience ................................................................................28 Intelligent data processing .................................................................30 Case Study: Retail Bank Gains More Value from Security Tools ..........31 Security fabric results in $680,000 cost savings ..............................32 CHAPTER 4: Adding Application and Threat Intelligence to the Security Fabric ............................... 33 Streamlining Security With a Pre-Filtering Appliance ...........................33 Incorporating Real-Time Expert Security Analysis.................................35 Table of Contents v These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. Performing Advanced Troubleshooting .................................................36 Ensuring Regulatory Compliance ............................................................38 Case Study: Hosting Service Tackles Attack Traffic with Ixia ThreatARMOR ............................................................................................39 Intrigued by pre-filtering.....................................................................39 Intrusions reduced by 80 percent .....................................................40 Out-of-band deployment upgraded to inline ...................................40 CHAPTER 5: The Benefits of a Total Visibility Security Fabric ............................................................................. 41 Maximizing the Value of Security and Monitoring Tools ......................41 Optimizing Incident Response to Reduce Mean Time to Repair .....................................................................................................43 Enabling High-Availability and Fast Failover ..........................................43 CHAPTER 6: Building Confidence through Security Testing........................................................................... 45 Validating Your Designs and Configurations .........................................45 Reducing Risk and Costs ...........................................................................46 Case Study: Leading Financial Institution Secures Its Network from Cradle to Grave ...........................................................47 Validating the initial design ................................................................47 Implementing the design ....................................................................48 Looking ahead ......................................................................................48 Staying Vigilant About Updates and Patches .........................................49 Stress Testing Your Network Environment ............................................49 CHAPTER 7: Ten Requirements for Security and Network Monitoring ...................................................