Cisco Cisco ASA 5506H-X with FirePOWER Services Informationshandbuch

Seite von 3
The Cisco approach to advanced protection from security 
threats, across the network and in all phases of an attack 
in a context of the Internet of Everything.
Solution
dedicated to the safety of the visitors, operators and pavilions,” confirmed Mirko 
Berlier, Cisco Systems Engineer & Expo 2015 Architect. “The systems of video 
surveillance, access control for the Expo area and even the sensors for fire and 
intrusion detection were all connected to the IP network”.
All the information and data collected and correlated in real time was shared 
with the Command and Control Center, whose team played a decisive role by 
taking charge of all the systems designed to protect people and property.
Tightly integrated with the physical security systems, IT security played 
a leading role at Expo 2015, the first in history to be entirely supported 
by systems and solutions based on an IP network. All the Expo Smart 
City services, the heart of the event, in other words, were enabled by 
digital applications and platforms. “A successful attack could have totally 
jeopardized Expo,” noted Berlier, “by preventing the turnstiles from opening, 
for example, or jamming the physical security systems, or blocking the 
attractions in the pavilions, with serious damage to the event and the 
reputation of the organizers.”
So Cisco designed a network infrastructure that consistently prioritized 
security, to ensure a level of protection that corresponded to next 
generation criteria. “The events detected by physical security devices like 
the video surveillance cameras and the sensors were matched with the 
protections against attacks and malware,” said Guido Arnone, Director of 
Technical and Digital Innovation for Expo 2015. “Applying Cisco’s Internet of 
Everything approach to safeguarding persons and property was a winning 
move, because the correlation of data and processes enabled the Control 
Center to make and implement the most appropriate choices.”
Traditional security policy functionalities were guaranteed by the high-
performance Cisco ASA (Adaptive Security Appliance) firewall which served 
the security needs of the central data centers and the pavilions. “Thanks to 
this architecture, we were able to control all traffic to and from the public 
network and the cloud,” said Berlier.
© 2016 Cisco Systems, Inc. All rights reserved. 
2
More than half a million intrusion attempts and over 
10,000 attempts to take control of applications and 
devices were blocked by Cisco security, pervasive right 
across the network.
Results