to help enterprise security across Europe
The resource centre for busy senior executives seeking the latest insights into IT Compliance & Privacy issues for major organizations
 
sarbaines oxley ofcom communications regulator
Latest Resources      data protection register
compliance resources privacy resource center

Breaking Global News
Global Compliance and Privacy News
- Breaking News, updated every 30 minutes
•   Compliance, Privacy and Security
•  Money Laundering
•  Phishing
•  Regulatory Issues
•  SOX, Basel 2, MiFID


You Tell Us:
S
S
L

T
E
C
H
N
O
L
O
G
Y
We use SSL Technology for web data entry points:

Always
Sometimes
Never
What is SSL?

News
Are Smartphones Endangering Security? - Wick Hill
Dealing with Internet Security Threats - Ian Kilpatrick
How the New EU Rules on Data Export Affect Companies in and Outside the EU - Thomas Helbing
Farmers' Data Leak Highlights Old Technology Use - Wick Hill
Saving Money with SFTP - Wick Hill
UK Information Commissioner targets firm selling vetting data - Eversheds e80
12 Key Steps to Internet Security - Wick Hill
Telephone Monitoring Legality in the UK - Dechert
Firewall or UTM - Wick Hill
UK Information Commissioner demands mobile device encryption - Eversheds e80
Data loss - liability, reputation and mitigation of risk - Eversheds e80
Phorm, Webwise and OIX - BCS Security Forum
The challenges of PCI DSS compliance - Thales, Russell Fewing
"Quality" Data Vendor Spams us! Editor astounded!
National Gateway Security Survey 2008 - Wick Hill
Unified Threat Management - Watchguard Technologies

news archives
:
0 | 1 | 2 | 3 | 4 | 5 |
6 | 7 | 8 | 9 | 10 | 11 |
12 | 13
[What is this?]

Industry Blogs
Tim Berners Lee's Blog
Tim Callan's SSL Blog
Davis Wright Tremaine's Privacy & Security Law Blog
Emergent Chaos Blog
Michael Farnum's Blog
Phillip Hallam-Baker's Blog - The dotFuture Manifesto: Internet Crime, Web Services, Philosophy
Stuart King's Security and Risk Management Blog
David Lacey's IT Security Blog
Metasploit Official Blog
Jeff Pettorino's Security Convergence Blog
Jeff Richards's Demand Insights Blog
David Rowe's Risk ManagementBlog
Bruce Schneier's Security Blog
Larry Seltzer's Security Weblog
Mike Spinney's Private Communications Blog
Richard Steinnon's Threat Chaos Blog
The TechWeb Blog
Tim Trent's Marketing by Permission Blog
Rebecca Wong 's DP Thinker Blog

Newsletters
23 February Newsletter
Newsletter Archives are located in "News"

Industry Update
Internet Security Intelligence Briefing - November 2005
Find out the latest trends in e-commerce, web usage & the latest threats from adware/Spyware

Reports
Phorm, Webwise and OIX
- BCS Security Forum

'The Any Era has Arrived, and Everyione has Noticed' - Stratton Sclavos - VeriSign
Identity Security - Time to Share
Malicious code threats - iDefense
Public Alerts - updated as they happen from Stopbadware.org
Public Alerts - updated as they happen from Websense
Public Advisories - updated as they happen, from iDefense
Phoraging - Privacy invasion through the Semantic web: a special report by Mike Davies of VeriSign

Legislation
Privacy Laws & Business International E-news, Issue 57
Privacy Laws & Business UNited Kingdom E-news, Issue 60

Security Reviews
February 2007 - VeriSign Security Review
The security review archive is here

Case Studies
Finance Industry
Case Study Example

A case study on a Finance industry company.

White Papers
VeriSign® Intelligent Infrastructure for Security
VeriSign® Intelligent Infrastructure: An Overview
Identity Protection Fraud Detection Service - description of the service
Life of a Threat - Video on Threat Management Lifecycle
Optimizing Enterprise Information Security Compliance - Dealing with all the audits
For a full list of all whitepapers, visit our Whitepaper library

Legal Notices
Privacy Policy
Terms of use

basel 2 sarbanes oxley
    legislation
data controller notification binding corporate rules BCR data transfer third countries third part data transfer basel 2 regualtor regulation regulate FSA banking network security RSA encryptin algorithm Bits sacked bank staff
Blogs compliance Reports compliancy Legislation Data Protection Case Studies data privacy White Papers data protection act News information commissioner Events security standards Links information security iDefense
Retail Solutions

Firewalll or UTM - Wick Hill

compliance and privacy

Current News Updates

Firewall or Universal Threat mamnagement System, UTM

UTMs used to be the domain of smaller companies, but Ian Kilpatrick, chairman of security specialist Wick Hill Group, explains why UTMs are now a serious contender for providing firewall protection, and a whole lot more, for enterprises and larger companies.

Unified threat management systems (UTMs) have been growing in popularity for the last few years. Traditionally, they have been widely adopted by SMEs, but larger companies and enterprises are now also deploying UTMs, appreciating the benefits they can offer.

UTMs are designed to provide a range of security solutions in a single appliance, reducing costs and simplifying the whole process of security systems management, reporting and installation.

The minimum requirement for a UTM, according to IDC, is a firewall, VPN, antivirus and intrusion detection/prevention. Super UTMs (sometimes called extended UTMs or XTMs) have, however, evolved from this to incorporate additional capabilities which can include URL filtering, spam blocking and spyware protection, as well as centralised management, monitoring, and logging capabilities.

There are many reasons for the growth in popularity of UTMs. Cost is a key issue, with common thought being that a UTM device can cost less than a quarter of the price of equivalent, individual point solutions. Simplified centralised management is a further reason for adopting UTMs. Having multiple security solutions in one appliance makes managing security overall much simpler, as well as enabling easier event consolidation.

Larger companies and enterprises are now also adopting UTMs because they have begun to appreciate the benefits of less expenditure and easier centralised  administration. Large companies are typically using UTMs to centrally secure branch and remote offices; or alongside their existing gateway firewall for the additional UTM functionality. Additionally, many companies are using UTMs as their main gateway security appliance for all functions.

Larger organisations using point solutions are often unable to scale the solutions to the number of sites they have, because of cost, installation, management, reporting  and ongoing support issues. This can lead to organisations deploying reduced security and inferior policies at remote locations. UTMs can help overcome these problems.

Where companies use a powerful UTM as their main firewall and also deploy the same brand UTMs at branch offices, they have the big advantage of being able to manage and report on all their branch office security from one central location. This can give much greater control over branch and remote office security, simplify and improve overall company security, reduce support costs in areas such as patch updating, and reduce data centre costs.

UTM models are now available which are aimed specifically at larger sites, with the high performance and multi-gigabit throughput to deal with thousands of users. Such systems might integrate stateful packet firewalls with VPNs, zero day attack prevention, anti-spyware, gateway anti-virus, intrusion prevention, anti-spam, and URL filtering.

The recent importance of green issues is another reason UTMs are becoming more attractive to larger companies. UTMs integrate several security functions into one single appliance and this fact alone could qualify them to be ‘green'.

One single UTM appliance can replace up to five or six separate security appliances or servers. This saves space data centre space in the office and significantly reduces power consumption, both in the rack and in the air conditioning necessary to cool multiple products. Given the increased pressure on data centres in relation to power issues, this is can be a key benefit.

A UTM could also be considered ‘green' if it can easily upgrade to add more functionality and performance.  This would allow a UTM to grow and change with a company's needs, rather than having to be wastefully ditched when it fails to cope with increased demands.

A stated disadvantage of UTMs over point solutions is that they have a single point of failure with all security systems potentially down at the same time and this would obviously be a serious problem for large enterprises. . However, one additional appliance can provide failover  protection for perhaps five key security functions.

Choosing a UTM

For any company looking at UTMs, it is essential to define requirements and thoroughly research the market, but going for an established name with a proven record in firewall security is a good way of establishing a shortlist. Bear in mind that there is no legal definition of a UTM and that there are significant variations between UTM appliances. The variations are on price, functionality, performance, scalability and most importantly security.

Not all suppliers provide solutions that are suitable for larger companies. Performance is a key element. Many UTMs aren't designed for all the functions to work together, so performance can rapidly decline when all functions are switched on.

You may want considerable room for growth or an appliance that is licence upgradeable for both performance and function. You'll also need a firewall that has deep packet inspection as a minimum, not just stateful inspection. 

The future of UTMs

Recently, UTM market leader WatchGuard spoke about its plans for the future of UTMs and how they will adapt to current and future needs for network security. These plans indicate that UTMs will be well placed in the future to fulfil the needs of enterprises and larger companies.

WatchGuard's plan is for UTMs to provide ‘Extensibility', which means the ability to add onto or extend. UTM appliances will be able to proactively adapt to dynamic network environments, as well as protect against unknown, future threats.  As businesses grow, so too will their security platform.

‘Extensibility' recognises that each network is unique with individualised needs and concerns. The new UTM appliances would interoperate in and support mixed network infrastructures, and have the inherent security technology to be flexible. Administrators will be able to pick and choose the security service they want from the device. 

For example, some users may want anti-virus (AV) protection provided at a different source other than the gateway.  Here, an administrator could turn “off” the AV protection at the new style UTM appliance, while maintaining full firewall, IPS/IPS as well as web content filtering at the network gateway.  The choice of security services would be up to the customer.

Check Point also recently showed the future direction of UTMs with the launch of its Power-1 appliances, designed specifically for larger enterprises and delivering up to 14 Gbps throughput.

Conclusion

Enterprises and larger companies can now seriously consider UTMs, as an alternative to firewalls and other point solutions. Costs savings, easier management and green credentials are just a few of the issues which make them attractive. Powerful UTM appliances with high performance aimed at very large networks are now available. Future development like ‘Extensibility' will provide adaptability and future proofing which will help all companies protect in an ever changing security environment.


Ian Kilpatrick, the author, is chairman of Wick Hill Group plc, specialists in secure infrastructure solutions for ebusiness. Kilpatrick has been involved with the Group for over 30 years and is the moving force behind its dynamic growth. Wick Hill is an international organisation supplying most of the Times Top 1000 companies through a network of accredited resellers.

Kilpatrick has an in-depth experience of computing with a strong vision of the future in IT. He looks at computing from a business point-of-view and his approach reflects his philosophy that business benefits and ease-of-use are key factors in IT. He has had numerous articles published in the UK and oveseas press, as well as being a regular speaker at IT exhibitions.

CRN 2008 channel awards winnder of ' Channel Personality of the Year', he is never afraid to voice his opinions on all aspects of the industry and on IT security issues in particular. He has an in-depth experience of computing with an excellent understanding of the industry from the vendor, distributor, reseller and end user point-of-view.

He has a strong vision of the future in IT and IT security. His approach reflects his philosophy that business benefits and ease-of-use are key to successful infrastructure deployment.


Please contact Wick Hill on +44 (0)1483 227600, web www.wickhill.com.

 


This site is independent of all its sources
The contents of the site are sourced from across the industry. All copyrights are acknowledged.