IBM Security Success Story: Westpac →
IBM Security Success Story: Westpac →
© 2013 IBM Corporation 1 IBM Security Systems IBM Security Success Story: Westpac Sydney, Australia Ryan Hall Worldwide Sales Executive, Infrastructure Security Products IBM Corporation email@example.com @ryanohall
© 2013 IBM Corporation 2 IBM Security Systems Corporate Background: Westpac Westpac was founded in 1817 and was the first bank established in Australia • Headquartered in Sydney since 1982 Publicly traded Banking and Financial Services firm • 1,200 branches • 2,900 ATMs • 12.5 million customers • 36,000 employees Second-largest bank in Australia (by assets) and largest bank in New Zealand Westpac's vision is to be the leading financial services company in Australia and New Zealand URL: http://www.westpac.com.au
© 2013 IBM Corporation 3 IBM Security Systems IBM and Westpac: Technology Partnership Tight strategic I/T partnership between IBM and Westpac dates back to 2000 Most recently, the partnership was renewed with a focus on Westpac’s “Technology Transformation Program: • Driven by large acquisition of competitor and need to standardize across enterprise • 5 year initiative with goals to: Improve service quality for bank staff and customers Lower overall security risk Decrease information technology costs Support Westpac business agility (i.e., M&A, new product/service lines)
© 2013 IBM Corporation 4 IBM Security Systems Westpac Network Security Prior to implementing ISS appliances, the existing network defenses generated too many false alerts And, as a financial institution subject to stringent regulatory requirements, Westpac needed to increase the speed and accuracy of finding malware and breaches From a management standpoint, having systems from multiple IDS/IPS vendors was not optimal To increase the performance of their network, Westpac was rebuilding its network infrastructure for 10 GbE Westpac decided to standardize on IBM Network Security products and implemented IBM Intrusion Prevention Systems in their headquarters and remote offices and branches Models deployed today are the GX4, GX5, GX6 and GX7, and additionally, Westpac formerly deployed the predecessor platform which was acquired from ISS by IBM One of the first customers of the new XGS line of Next Generation IPS systems • Ordered eight XGS 5100 systems for immediate deployment in Australia and New Zealand • Plans to standardize on XGS platform for core and branch network security
© 2013 IBM Corporation 5 IBM Security Systems Benefits to Westpac from IBM Network Security Vulnerabilities in operating systems, web servers, and other applications provided an opportunity for attackers to penetrate Westpac’s systems Attacks were leading to service interruption, data theft, and increasing costs for remediation Internal Westpac users were causing security issues by opening infected files in their emails Attackers also were using new ways to get malware into the Bank, including storage devices and social engineering Common applications (such as PDF, Flash, Java, and MS Office) were experiencing a high amount of vulnerabilities Issue Issue IBM’s Virtual Patch technology helps block attacks before they reach their intended target (NOT SIGNATURE BASED) The IBM Protocol Analysis Module (PAM) uses a multi-layer approach of a wide variety of different techniques to detect and prevent exploits The advanced heuristics engines within IBM’s Protocol Analysis Module can detect and block many of these attacks before they reach the user PAM currently supports nearly 400 different protocols and file formats, so malicious files can be detected in channels other than email Again, IBM’s Virtual Patch technology blocks these vulnerabilities before at-risk files applications can be compromised IBM Network Security Benefits IBM Network Security Benefits
© 2013 IBM Corporation 6 IBM Security Systems Future Benefits to Westpac from IBM Network Security With new XGS next-generation platform, Westpac expects to further grow their comprehensive network security capabilities: Advanced Threat Protection • Block phishing, malware sites, and botnet command & control • Visibility and control of applications can enforce policy and save bandwidth SSL Visibility • Detect and prevent user-targeted attacks over encrypted channels • On-box hardware acceleration prevents the need for a dedicated SSL appliance Adaptable Hardware • Swappable network interface modules provide connectivity to 7 different network media standards • Reduce racks pace by up to 85% and power consumption by up to 82% compared to GX platform Flexible Performance Licensing – Save money by only licensing for the throughput you need – As bandwidth increases, increase appliance performance without even having to reboot Tight integration with QRadar – On-appliance flow generation – LEEF-format event feeds
© 2013 IBM Corporation 7 IBM Security Systems Customer Success: Target Client Requirements To increase the performance of their Datacenters target decided to rebuild its network infrastructure for 10 GbE Existing network IPS solution had only 1 Gbps throughput capacity, so they decided to evaluate different vendors to increase performance Competition Sourcefire IBM Solution IBM Security Network IPS GX7800 IBM Security SiteProtector System Why IBM Utilizing a partner’s lab, Target tested solutions from both IBM and Sourcefire Included performance testing at 10Gbps+ throughput and detection IBM scored higher in both areas with Sourcefire failing evasion testing Target later confirmed this testing with similar results in their internal environment Industry: Retail Profile: Target Corporation is an American retailing company, founded in 1902 and headquartered in Minneapolis, Minnesota. It is the second-largest discount retailer in the United States. The company is ranked at number 38 on the Fortune 500 as of 2012 and is a component of the Standard & Poor's 500 index.
Target is headquartered in Minneapolis, MN Size: 365,000 employees www. target.com
© 2013 IBM Corporation 8 IBM Security Systems Customer Success: Jackson National Life Insurance Client Requirements Desire to create another security layer around its critical servers Performance and high throughput was critical 10 GbE connectivity Competition Palo Alto Networks IBM Solution IBM Security Network IPS GX7412 IBM Security SiteProtector System Why IBM Jackson National life was already using Palo Alto Networks as their network firewall solution and initially considered utilizing PA IPS After an internal head to head evaluation, IBM scored higher as a result of intelligence provided by the X- Force R&D team IBM was also determined to be superior under high levels of throughput, and was valued for its ability to scale up to future bandwidth needs Industry: Insurance Profile: A family-owned company that has evolved into a diversified retirement services provider, Jackson National Life Insurance Company® ("Jackson®") has a rich history. Named after Andrew Jackson, the seventh president of the United States, Jackson first opened for business in 1961. Jackson National Life Insurance is headquartered in Lansing, MI Size: 2,900+ employees www. jackson.com
© 2013 IBM Corporation 9 IBM Security Systems Customer Success: Pfizer Client Requirements Increase security in Pfizer’s key data centers to handle growth High levels of security without compromising performance Competition Sourcefire IBM Solution IBM Security Network IPS GX7800s (4) Deployed 2 GX7800s in each critical datacenter IBM Security SiteProtector System Why IBM IBM built a close relationship with Pfizer and was able to respond extremely quickly to their needs High levels of confidence in both IBM and IBM’s security technology Found the IBM’s “ahead of the threat” detection to be superior vs. the Sourcefire offering Valued unique IBM features such as real-time Web application protection Industry: Pharmaceuticals Profile: Pfizer is the world's largest research-based biopharmaceutical company with major research and development locations in the United States and the U.K. Phizer operates in nearly every market in the world with 58 percent of revenues generated outside the U.S. Pfizer is headquartered in New York City, NY Size: 100,000+ employees www. pfizer.com
© 2013 IBM Corporation 10 IBM Security Systems Key Assets and Proof Points IBM Wins InformationWeek’s IPS Survey IBM was rated #1 in the recent InformationWeek survey [LINK] New Tolly Group Test Report Released IBM Delivers Superior Protection from Evolving Threats with High Levels of Performance. [LINK] Equifax Uses QRadar, Network IPS and AppScan! Utilize this case study to show QRadar clients the benefits of utilizing IBM Security Network IPS for threat protection [LINK] (Note: Put slides into presentation mode to click the links to each asset)
© 2013 IBM Corporation 11 IBM Security Systems ibm.com/security © Copyright IBM Corporation 2013. All rights reserved. The information contained in these materials is provided for informational purposes only, and is provided AS IS without warranty of any kind, express or implied. IBM shall not be responsible for any damages arising out of the use of, or otherwise related to, these materials. Nothing contained in these materials is intended to, nor shall have the effect of, creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software. References in these materials to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. Product release dates and/or capabilities referenced in these materials may change at any time at IBM’s sole discretion based on market opportunities or other factors, and are not intended to be a commitment to future product or feature availability in any way. IBM, the IBM logo, and other IBM products and services are trademarks of the International Business Machines Corporation, in the United States, other countries or both. Other company, product, or service names may be trademarks or service marks of others.