JWTS Presentation
- 1. A Special Presentation Presented by: Tony DeGonia Solution Architect – Security | Cloud
- 2. Project Summary In a joint initiative with the Texas Department of Public Safety, The U.S. Department of Transportation and several cities across the State of Texas, an expansive project to centralize the towing and storage of vehicles across the State of Texas has been authorized to be granted to a single entity. The bidding for said project was fierce but ultimately was granted to Jimbob’ Towing and Wrecker Services, based in Dallas, Texas. JTWS has a long history of serving the DFW metroplex law enforcement agencies with towing and wrecker services for more than a decade. JTWS has built a solid reputation for excellent service, customer care, fairness and honesty when dealing with the citizens of the State of Texas. The initial project will span the 5 major cities in the State of Texas including Dallas, Fort Worth, Houston, Austin, San Antonio and Galveston Texas. Each of the sites will include a minimum 5 acre storage facility, complete record tracking of vehicle towing, storage and recovery. Proceeds from these services will include a 90/10 split between JTWS and the initiating agency. Access to centralized systems will be granted to both the private entity and all involved Law Enforcement Agencies. Services will include the auctioning of forfeited and non-recovered vehicles after 180 days in storage.
- 3. Project Requirements Deploy Multi-level tracking system to enable LEO to request a Wrecker 24x7x365 to clear emergencies and other towing needs. Deploy elastic infrastructure capable of managing workload regardless of session/connection count but also must meet ROI requirements for cost effectiveness. 10G networking across all facilities core networks. Minimum 5K video security system with multiple monitoring points for all cameras across the enterprise. Minimum 365 day storage of all incident related video recording with timeline correlation and cloud based archiving for 3 years. 45 days of video recording must be maintained onsite. Full UTM based gateway firewall protection with Branch-Office VPN connectivity, Mobile IPSec VPN connectivity, Mobile Authentication, External Proxy Services, Threat Detection and Response and IPSec connectivity with IKEv2 for AWS interconnectivity.
- 4. Introduction Sovergence is a full service managed services provider, managed security services provider and managed cloud provider. With offices in Dallas, Houston and San Antonio Texas, Sovergence has the man power and brain power to cover the entire State of Texas as well as regional and national customers. Sovergence is a member of the MSP and Cloud Alliance and regularly holds speaking engagements with the State of Texas and the Texas Municipal League with a stated mission of bringing advanced technologies to municipalities throughout the United States. Headquartered in Dallas, Texas, Sovergence has been an industry leader since it's inception in 2005 and enjoys year over year growth in excess of 25%. Sovergence partners with industry leaders to bring best of breed services and products to it's client base including Gold and Professional Level partnerships with Amazon Web Services, WatchGuard, Cisco, HP, Veeam, Commvault, Nutanix, IndigoVision, Panasonic and many others.
- 5. Network Design and Architecture by: Tony DeGonia Solution Architect – Security | Cloud tony_degonia@sovergence.com Key Design Elements 1. Multi-location design 2. Advanced UTM services implementation 3. IPSec VPN Tunneling with IKEv2 for integration with AWS. 4. Mobility capable for transportation and Law Enforcement. 5. 10G Backbone at each location. 6. 5K camera system with visibility across all locations at each monitoring stations. 7. 12 month video archiving with AWS – S3 archiving storage. 8. Advanced tracking system with payment gateway and LEO portal to request tow vehicle. 9. ERP web gateway integration for mobile devices 10. AWS Route 53 DNS service with FQDN for each entry point into the premise networks and virtual private cloud.
- 6. Site Internet and Voice Services Services Provided for this project • Hosted VoIP Services at all location with local, LD and Toll Free Services. • FiberOptics to each site with 1GB connectivity upgradeable to 10GB burstable. • Same Network connectivity across all locations which allows for layer 3 and above services guaranteed service. • Redundant underlying carrier circuitry for failover routing in the event of a failure in the underlying physical network.
- 7. IndigoVision is a developer of complete, end-to-end video security solutions from security camera to video recorder to body worn video cameras to security management software, so performance and stability go hand-in-hand. Products that make you feel safe, by design.
- 8. Core Switching 5510 48G PoE+ 4SFP+ HI (JH148A) 52 Port Switch HPE FlexNetwork 5510 HI Series switches are Gigabit switches delivering outstanding resiliency, security, and multiservice support for the edge layer of data center, large campus, and metro Ethernet network. This model has 48x 10/100/1000 PoE+ Gigabit ports, 4x 10GbE SFP+ ports, and one expansion slot. With Intelligent Resilient Fabric (IRF) support and available dual power supplies, the HPE FlexNetwork 5510 HI Series Switch can deliver the highest levels of resiliency and manageability. Designed with four fixed 10GbE ports and supports additional modular uplinks, these switches can provide up to six 10GbE uplink ports. With complete IPv4/IPv6, OpenFlow, and MPLS/VPLS features, the series provides investment protection with an easy transition from IPv4 to IPv6 networks. Key Features Ports: (48) RJ-45 autosensing 10/100/1000 PoE+ ports; Ports 1 - 8 support MACSec; (4) SFP+ 10GbE ports; (1) port expansion module slot; Supports a maximum of 6 SFP+ ports or 2 1/10GBASE-T ports or 2 40GbE ports, with optional module Memory and processor: 2 GB SDRAM; Packet buffer size: 4 MB; 512 MB flash Throughput: up to 250 Mpps Routing/switching capacity: 336 Gbps
- 9. Premise Servers HPE ProLiant DL360 Gen9 Server The HPE ProLiant DL360 Gen9 Server delivers a 1U chassis with up to two processors, delivering an optimal unit that combines high-performance, low energy consumption, improved uptime, and increased density. Leveraging Intel’s latest E5-2600 v4 processors with 21%1 performance gain, plus the latest 2400 MHz HPE DDR4 SmartMemory supporting up to 3 TB and up to 23%2performance increase. What's new • Intel® Xeon® E5-2600 v4 Processors with 21%1 performance gain and up to 22 cores • 2400MHz DDR4 memory offering up to 23%2 performance gain and 3.0 TB max capacity with 128GB LRDIMMs • HPE 25Gb Ethernet Adapters to help improve performance with latency sensitive applications • Industry-leading NVMe PCIe SFF SSDs up to 2.0 TB for low latency and top performance
- 10. Network Security Top of the Line Performance & Security The Firebox M4600 and M5600 allow businesses to add the network interface modules that best suit their environment. With firewall throughput of up to 60 Gbps and UTM throughput up to 11 Gbps, the Firebox M4600 and M5600 are our fastest Firebox appliances ever. This level of performance, paired with powerful security, flexible high-port density, and affordability makes these the ideal solutions for distributed, hub-and-spoke type deployment scenarios.
- 11. Fundamental Security Services Network Security Intrusion Prevention Intrusion Prevention Service uses continually updated signatures to scan traffic on all major protocols, providing real-time protection against network threats, including spyware, SQL injections, cross-site scripting, and buffer overflows. URL Filtering In addition to automatically blocking known malicious sites, WatchGuard WebBlocker delivers granular content and URL filtering tools to block inappropriate content, conserve network bandwidth, and increase employee productivity. Gateway AntiVirus Leverage our continuously updated signatures to identify and block known spyware, viruses, trojans, worms, rogueware and blended threats – including new variants of known viruses. At the same time, heuristic analysis tracks down suspicious data constructions and actions to make sure unknown viruses don’t slip by. Network Discovery A subscription-based service for Firebox appliances that generates a visual map of all nodes on your network, making it easy to see where you may be at risk. It helps ensure only authorized devices are connected while detecting all open ports and protocols.
- 12. Fundamental Security Services Network Security Reputation-Based Threat Prevention A powerful, cloud-based web reputation service that aggregates data from multiple feeds to provide real-time protection from malicious sites and botnets, while dramatically improving web processing overhead. Spam Prevention Real-time, continuous, and highly reliable protection from spam and phishing attempts. WatchGuard spamBlocker is so fast and effective, it can review up to 4 billion messages per day, while providing effective protection regardless of the language, format, or content of the message. Application Control Allow, block, or restrict access to applications based on a user’s department, job function, and time of day. It’s never been easier to decide who, what, when, where, why and how applications are used on your network.
- 13. Network Security Advanced Security Services APT Blocker APT Blocker uses an award-winning next-generation sandbox to detect and stop the most sophisticated attacks including ransomware, zero day threats, and other advanced malware designed to evade traditional network security defenses. Threat Detection and Response Security data collected from the Firebox and WatchGuard Host Sensor is correlated by enterprise-grade threat intelligence to detect, prioritize and enable immediate action against malware attacks. Data Loss Prevention Prevent data breaches and enforce compliance by scanning text and files to detect sensitive information attempting to exit your network, whether it is transferred via email, web, or FTP.
- 15. Secure WIFI WatchGuard offers organizations of all types and sizes a complete portfolio of wireless solutions that lead the market in Security, Manageability, Visibility, and Performance, without sacrificing security. Managed with the Wi-Fi Cloud, you can unlock the full potential of your WatchGuard access points with powerful Wireless Intrusion Prevention System (WIPS) security, real-time business driven analytics, and powerful engagement and marketing tools. The AP120 provides enterprise-grade functionality at a fraction of the cost. Built for networks with heavy smartphone and tablet access such as guest or public Wi-Fi environments, or smaller-footprint locations that support limited devices. This access point is ideal for branch offices, stores, and small classrooms. The AP320 is perfect for busy environments with a diverse client ecosystem and Wi-Fi requirement. This high horsepower access point can support critical applications like voice, video, and streaming cloud -based services with ease.
- 16. Secure WIFI The AP322's rugged, IP67-rated enclosure protects the wireless access point from the wind, rain, and cold weather, while delivering broad, fast, and reliable Wi- Fi coverage. The AP322 is ideal for stadiums and sports fields, schools/universities, malls, parks, hotel pool areas and open air cafes, shipping docks, warehouses, and other harsh environments or outdoor locations. When managed with the Wi-Fi Cloud, you can unlock the full potential of your WatchGuard access points with powerful Wireless Intrusion Prevention System (WIPS) security, real-time business driven analytics, and powerful engagement and marketing tools.
- 17. Secure WIFI To unlock the vast potential of Wi-Fi for your business you need to do more than supply access. When you deploy a WatchGuard Access Point with a Wi-Fi Cloud subscription, you gain powerful WIPS security, in-depth guest and airspace analytics, and invaluable marketing and guest engagement tools. And all of these game-changing features are included with purchase – no expensive third party upgrades are required.
- 18. • Marker Packets • Wired-Side Injection • Wireless-Side Injection Rogue AP External APs Secure WIFI – Wireless Intrusion Prevention
- 19. Deployment and Implementation Project Managers • PMP Architects • AWS Solution Architect – Associate • CISSP • CEH • CCIE Engineers • CCNP • CCND • MSCE/MCSA • Network+/Security+ Technicians • CCNA • MCP • A+ and others
- 20. Thank you for your time. • Any Questions Any Questions?