topic Re: Understaanding MSSP in General Topics

Understaanding MSSP

hamza-zidane — Tue, 03 Apr 2018 21:35:03 GMT

Hello brothers,

Plz i really need your help, we have a big project with a big Service Provider, it's the MSSP, i know the concept but technically i don't know anything.

As i understood, the MSSP is a security as a service, the Service Provider host the Firewalls Appliances in his own local, and sell the security service to its clients, but the biiig question is!! for example a client ask us for 2Gb Throughput, 100 globalProtect connexion... how we can offer this for him ?? the service provider has 100 PA-5060 with 500gb throughput for example but the client need just 2Gb Throughput, how i can manage this !!

Plz i really need your help

Re: Understaanding MSSP

BPry — Thu, 05 Apr 2018 13:49:17 GMT

@hamza-zidane,

Generally what you would do in these situations is setup proper QoS statements that held a Maximum Egress/Ingress of whatever the Throughput requirements are. However I would generally implement this on switches, not the firewall itself; although I'm sure that you can utilize the firewall itself without too much of an issue as long as you take advantage of the vsys feature. I would hope as a MSSP that each customer is given their own VSYS, so that shouldn't be too much of an issue.

To limit the number of GlobalProtect connections you'll actually find that option under GlobalProtect > Gateways > Gateway Name > Agent > Tunnel Settings under the name 'Max User' you would enter 100. With this configuration GlobalProtect would allow up to 100 users at any given time, with subsequent users being denied access with a message that indicates the max number of users has been rached.

Re: Understaanding MSSP

hamza-zidane — Mon, 09 Apr 2018 20:54:19 GMT

hi brother @BPry

Thanks very much for ur ansewr, i think the Qos is a good idea, but vsys i don't think so, cos when enable the vsys you give the client all the features and capabilities of the used Firwal model.

Re: Understaanding MSSP

BPry — Mon, 09 Apr 2018 21:24:27 GMT

@hamza-zidane,

I am interpreting your meaning of MSSP correctly right; Managed Security Service Provider?

I'll agree to disagree on the vsys thing; in my mind whenever you have multiple different customers sharing a sole firewall you segregate them using VSYS, and this is one of the great examples of why VSYS exists at all. You can completely seperate out traffic while still sharing the same physical infrastrucutre, but maintaining a logical seperation.

Re: Understaanding MSSP

hamza-zidane — Mon, 09 Apr 2018 21:52:38 GMT

Yes , normally that right, but i didn't negociate the real need of the custumers, anyway if i'll need help when we begun this big project i'll comme back here 🙂

the best comunity with the best members 🙂