![Page 1: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/1.jpg)
Geo-IP Layer of SecurityValue, Impact, and Importance In Today's Security Environment
Francesco TramaCo-Founder PacketViper, LLC
![Page 2: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/2.jpg)
Reluctance Of Use
• Management • Data Reliability/ Accuracy • Complexity • Increased Latency
• We’re A Global Company • Proxied Connections • Global Network Economy
?
![Page 3: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/3.jpg)
Today’s Firewall’s
FTP
WWW
VPN
SSH
TELN
IMAP
FTP
WWW
VPN
SSH
TELN
!
!
!
!
![Page 4: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/4.jpg)
Today’s Firewall’s
FTP
WWW
VPN
SSH
TELN
IMAP
(Outbound)
![Page 5: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/5.jpg)
Unwanted Traffic Effects
• Burdens Performance • Increases Logging • Increases Alerting • Increases Management • Reduces Threat Visibility
![Page 6: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/6.jpg)
Low Impact Probing From Many Location
Attacker Advantage: Bots/Proxy
![Page 7: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/7.jpg)
Attacker Advantage: Bots/Proxy Connection Based DDoS
![Page 8: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/8.jpg)
PROTECTED
Attacker Advantage: Bots/Proxy Millions Of Options
![Page 9: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/9.jpg)
Alerting / Logging
![Page 10: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/10.jpg)
Global Economy
![Page 11: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/11.jpg)
Firewall’s With Geo-IP Layer
FTP
WWW
VPN
SSH
TELN
IMAP
FIREWALLFTP
WWW
VPN
SSH
TELN
IMAP
GEO-IP
![Page 12: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/12.jpg)
Effects With Geo-IP Layer
• Burdens Performance • Increases Logging • Increases Alerting • Increases Management • Reduces Threat Visibility
• Improves Performance • Reduces Logging • Reduces Alerting • Less Management • Improved Threat Visibility
PROTECTED
CurrentDMZ
PacketViperGEO-IP LAYER
![Page 13: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/13.jpg)
Allow 80
Allow 80
Allow 80Allow 80,443,25
Allow 80,443,25
Allow 80,443,25
Allow 80,443,25
Allow 80,443,25
Allow 25
Allow 25
Allow 25
Allow 80, 25
Tailor Country Traffic
Allow 80, 25
PROTECTED
![Page 14: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/14.jpg)
PROTECTED
Reduce Proxy Effectiveness
![Page 15: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/15.jpg)
PROTECTED
Combat Connection Based DDoS
![Page 16: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/16.jpg)
Proper Geo-IP Filtering Effects on Proxy/Spoof
• Reduces The Attack Surface • Diminishes Their Effectiveness • Combat Connection Based DDoS Attacks • Improves Detection
![Page 17: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/17.jpg)
Companies At Geo-IP Layer
FTP
WWW
VPN
SSH
TELN
IMAP
FIREWALLFTP
WWW
VPN
SSH
TELN
IMAP
GEO-IP
![Page 18: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/18.jpg)
Effects of Company Filtering In TheGeo-IP Layer
• Tighter Controls To/From Countries • Reduces Risks/Exposures • Better End User Experience
![Page 19: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/19.jpg)
Summary
• Geo-IP Filtering Tools Improve the entire security layer by eliminating the volume through it.
• Geo-IP filtering should are not as robust on Application Layer devices.
• Geo-IP filtering lowers the threat exposure for the entire environment by limiting who has access globally.
• Geo-IP Filtering helps security teams identify threats faster, while reducing management time.
![Page 20: Value, Impact, and Importance of a Geo-IP layer](https://reader033.vdocuments.us/reader033/viewer/2022052705/58725f141a28ab31498b4ecf/html5/thumbnails/20.jpg)
Improve Everything, Replace Nothing
www.packetviper.com Toll Free: 855-758-4737