1. Hybrid IT is Here. Security: First.
6/15/2018 7:19 PM
THR2298
Hybrid IT is Here. Security: First.
John Jacobs
VP, Systems Engineering
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Data Networking Timeline
6/15/2018 7:19 PM
Data Networking Timeline
1990s
Devices are connected
State-aware firewall (1994)
First dating site: match.com (1995)
Today
Azure Stack
Hybrid IT is Here
2000s
Challenge #1: Rapid Scale
Application Awareness
Public Cloud (2006)
2010s
Traditional virtualization vendors stumble
Cloud Adoption Accelerates
At every point, security is crucial.
However, it is most often an afterthought.
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Data Security Timeline
Machine to Machine Attacks
Network Segmentation
Generation 3
Applications and Infrastructure
Advanced
Targeted Attacks
Advanced Threat Protection
Malicious
Apps
Application Control
Botnets
IP Reputation
Malicious
Sites
URL Filtering
Complexity and Threat Potential
Generation 2
Attack Vectors
Spam
Secure Gateway
Intrusion
& Worms
Intrusion Prevention
Exploits
Vulnerability Management
Viruses
& Spyware
Layer 5-7:
Antimalware
Generation 1
Connectivity
Layer 3-4:
Firewall
Hardware Theft
Layer 1-2: Physical
1990s
Today

4. The Legacy Deployment Model
Design
What services do we need?
What is the initial demand?
How steep is the growth curve?
Build
Where and how do we construct service offerings?
How long will it take to sign leases?!
Deploy
Fire up machines and start the work
Fine-tune for optimal performance
Secure
WAIT!
Recognize applications
Secure the perimeter
Segment the inside network

5. Hybrid cloud
A composition of two or more clouds (private, community or public) that remain distinct entities but are bound together, offering the benefits of multiple deployment models*
Private
Public
Hybrid
AZURE SECURITY
FortiOS
FortiGuard
5.6
SaaS
Public Cloud
IaaS
Hybrid Cloud
Virtual
Cloud
Stack
Private Cloud
FortiGate
Virtual
Cloud
FortiWeb
Data Center
Virtual
Cloud
Stack
FortiAnalyzer
Virtual
Cloud
Stack
FortiManager
Modern deployment is intelligent design encompassing all components with immediate service availability
FortiCASB
*Gartner Research

6. Shared Responsibility Model for Security
Tech Ready 15
6/15/2018
Shared Responsibility Model for Security
On-Premise
Infrastructure
(as a Service)
Platform
(as a Service)
Software
(as a Service)
Administration
Administration
Administration
Administration
Applications
Applications
Applications
Application
Data
Data
Data
Data
Runtime
Runtime
Runtime
Runtime
Managed by:
Middleware
Middleware
Middleware
Middleware
Customer
O/S
O/S
O/S
O/S
Virtualization
Virtualization
Virtualization
Virtualization
Vendor
Servers
Servers
Servers
Servers
Storage
Storage
Storage
Storage
Networking
Networking
Networking
Networking
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Why Fortinet?

8. Fortinet: Global Network Security Leader
Highlights: present
2000
founded in
headquartered in
Sunnyvale
California
4,700+
EMPLOYEES WORLDWIDE
100+
Offices
across the globe
$1bn
Revenue
In excess of
$1.5B
In reserves
Continuous Growth
Year on year
30%
395
patents
316 in process
issued
3.3m
Shipped security devices
320k
customers
This yields 50 billion security events ingested per day around the globe

9. Enhanced Protection Across the Entire Attack Surface
MANAGEMENT
ANALYTICS
INTELLIGENCE
SANDBOX/ATP
MOBILE
IoT /
SCADA
WINDOWS
MAC
CASB
PRIVATE
PUBLIC
METER
Endpoint
Cloud
Network
SWITCH
ACCESS
POINTS
WAF
Access
Apps
API and
Partnerships
Security needs a holistic solution from a capable and experienced provider

10. Security for Cloud Applications and Data
Virtualization
Private Cloud
Hybrid
Public Cloud
Hybrid
Hypervisor Port
SDN - Orchestration Integration
On-Demand
East-West
North-South
IaaS Cloud
Hypervisor
NGFW
WAF
Management
Reporting
APT
Connector
API
Flow
SaaS Cloud
Proxy
CASI
Broker
API
Fortinet-driven, open standards/API, or partner-led orchestration as applications move
Complete flexibility for existing deployments
Full Hybrid Solutions

11. Diverse Platforms in the Cloud
Single Management Console
FortiGate Enterprise Firewall
Application Controls, Anti-Virus, IPS, VPN, Web Filtering, Threat Intel
Applications
Pay as You Go / On-Demand (Hourly and Annual)
FortiWeb Web Application Firewall
Protect over SQL Injection, cross-site scripting, forward proxy
NGFW
WAF
Manager
Reports
ATP*
Performance
Certifications
FortiManager
Centralized Security Management
Consistency and control
Bring Your Own Licensing (BYOL) /
Annual Perpetual
2-16 vCPU
AZURE SECURITY
CENTER
Virtual Domain (VDOM) Capabilities
FortiMail
Security
True security and SPAM filter for O365
On-Demand
Orchestration
Auto-scaling
Fabric Partners
Automated Failover
Auto-scaling
FortiAnalyzer
Log Analytics and Forensics
Logging, compliance and visibility
* FortiSandbox and FortiSIEM in development

12. Across Hybrid Cloud and Multi-Cloud Environments
Secure data connectivity from any public access
Application-aware Firewall (NGFW)
Web Application Firewall (WAF)
Site-to-Site secured traffic tunnel
Azure VPN
Express Route
Firewall direct
Remote workers or IoT devices
Automated access
Azure VPN or firewall direct
Massive scale for endpoint growth that only leverage of the cloud can support
Any access solution.
ALL having complete visibility and consistent security posture

13. Segmenting End-to-End Traffic in Hybrid IT
Mitigate concentration of data and risk in consolidated environments within and across clouds
Internet
Cloud
Internal
Network
(100 Gbps+)
Private
Edge
Gateway
Data Center
ISFW
External
SG3
SG2
SG1
FortiGate-VM
On Azure Stack
Hypervisor
Deploy into flat, open networks w/o disruption
Fine-grained policy based on: users/apps/data/more
Increased throughput for inspecting east-west traffic
Replicate the growing trend of internal network segmentation

14. Automatic Scaling Protection for Elastic Workloads
Maintain user/data privacy while scaling web and social applications at the speed of Azure
Auto-scale inspection capacity across networks
Auto-provision rules to new workloads
Orchestrate physical and virtual service insertion at any location
Highly-available firewall clustering
Hypervisor
Hypervisor
Hosted Web servers, databases,
application servers, etc.

15. Trusted interoperation Intelligence Across Platforms
BROAD
POWERFUL
AUTOMATED
What does this mean?
Shared API
Integrated controls
Azure Security Center
Joint marketing
Trusted interoperation
Intelligence Across Platforms
Microsoft Azure is a member of the ever-growing Fortinet Fabric Program

16. Test Drive
FortiGate NGFW Without Commitment

17. Fortinet is Here to Secure it.
6/15/2018 7:19 PM
Hybrid IT is Here.
Booth #1907
Fortinet is Here to Secure it.
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. Please evaluate this session
Tech Ready 15
6/15/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. 6/15/2018 7:19 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.