Remote Monitoring & Deployment Solutions FinFly ISP In many real-life operations, physical access to in-country Target Systems cannot be achieved, and a covert remote installation of a Remote Monitoring Solution is required to be able to monitor the Target from within Headquarters. Quick Information FinFly ISP is a strategic, countrywide, as well as a tactical (mobile) solution, that can be integrated into an ISP’s Access and/or Core Network, to remotely install the Remote Monitoring Solution on selected Target Systems. Usage: · Strategic Operations Capabilities: · Deploys Remote Monitoring Solution on Target System through ISP Network Content: · Hardware/Software FinFly ISP appliances are based on carrier grade server technology, providing a maximum of reliability and scalability to meet almost every challenge related to networks’ topologies. A wide range of Network Interfaces – all secured with bypass functions – is available for the required active network connectivity. Several passive and active methods of Target Identification – from online monitoring via passive tapping to interactive communication between FinFly ISP and the AAA-Servers – ensure that the Targets are identified and their appropriate traffic will be provided for the deployment process. FinFly ISP is able to patch Files that are downloaded by the Target on-the-fly or send fake Software Updates for popular Software. The new release integrates Gamma’s powerful remote deployment application FinFly WEB that injects a Payload to any website visited by the Target. Usage Example: Intelligence Agency FinFly ISP was deployed in the main Internet Service Provider networks of the country and was actively used to remotely deploy a Remote Monitoring Solution on Target Systems. As the Targets have Dynamic-IP DSL Accounts, they are identified with their Radius Logon Name. Feature Overview Can be installed inside an Internet Service Provider´s Networks Handles all common Protocols Selected Targets by IP Address, Radius Login Name, DHCP and MSISDN Hides Remote Monitoring Solution in Downloads of Targets Injects a Remote Monitoring Solution as Software Updates Remotely installs a Remote Monitoring Solution through Websites visited by the Target For a full feature list, please refer to the Product Specifications. www.finfisher.com Different Location Possibilities F inFly ISP can be used as a tactical or strategic solution within ISP networks A tactical solution is mobile and the hardware is dedicated to the deployment tasks inside the access network close to the targets’ access points. It can be deployed on a shortterm basis to meet tactical requirements focused on a specific target or a small number of targets in an area. A strategic solution would be a permanent ISP/countrywide installation of FinFly ISP to select targets and deploy payloads from the remote headquarters without the need for the LEA to be on location. Of course, it is possible to combine tactical and strategic solutions to reach a maximum of flexibility for the deployment operations. Remote Monitoring & Deployment Solutions FinFly ISP Network Setup Strategic Deployment Tactical Deployment Remote Monitoring & Deployment Solutions FinFly ISP Product Components FinFly ISP Strategic A strategic deployment of FinFly ISP consists at least of the following: Management System at the LEMF Target Identification Probe Server(s) at the AAA-System of the network Deployment Proxy Server(s) at, for example, the Internet Gateway(s) FinFly ISP Servers HP ProLiant DL-Series G7 Business WS FinFly ISP Workstation HP Z-Series Throughput: > 20 Gbps Max. no. of NICs: 2 – 8 NICs Interfaces: 1GE Copper / Fiber 10GE Copper / Fiber SONET/SDH OC-3 / -192 STM-1 / -64 ATM AAL5 Processors: 1x – 8x Intel XEON Core: 2 – 8 Cores / Processor RAM: 12GB – 1TB HDD Capacity: 3 x 146GB – 4.8TB SAS Features: HP iLO 3 Redundant Power Redundant Fans Bypass Switch Function (if applicable) Operating System: Linux GNU (Debian 5.0) hardened FinFly ISP Tactical A tactical FinFly ISP System consists of the following: Target Identification & D eployment Proxy Server Portable Management System Notebook FinFly ISP Portable Atlas A9 17” Portable FinFly ISP Mgmt. Lenovo Thinkpad T-Series Throughput: 6 Gbps Max. no. of NICs: 3 NICs (Interfaces) Interfaces: 1x 1000BASE-T (Copper; 2 ports) 1x 1000BASE-SX (MM-Fiber; 2 ports) 1x 1000BASE-LX (SM-Fiber; 2 ports) Others upon request Processors: 1x Intel Core i7 Intel Xeon upon request Cores: 4 Cores / Processor RAM: 12GB minimum HDD Capacity: 2 x 1TB SATA Optical Drive: DVD+/-RW SATA Monitor: 1 x 17” TFT, Keyboard, Touchpad Features: Bypass Switch Function for NICs 012012-10FFlyISP Operating Systems: Linux GNU (Debian 5.0) hardened Windows 7 Prof. (Management Nb.) www.finfisher.com GAMMA INTERNATIONAL United Kingdom The information contained herein is confidential and subject to change without notice. Gamma Group International shall not be liable for technical or editorial errors or omissions contained herein. Tel: +44 - 1264 - 332 411 Fax: +44 - 1264 - 332 422