SecureLogix. Managed Security Service for Voice. Proactively Monitor and Respond to Voice/UC Threats. Harvest Your Maximum Cost Savings Potential.

Transcription

1 SecureLogix Managed Security Service for Voice Proactively Monitor and Respond to Voice/UC Threats. Harvest Your Maximum Cost Savings Potential.

2 The SecureLogix Managed Security Service for Voice is your quickest, most economical, and assured path to complete voice/uc network protection, fraud and financial loss prevention, optimized voice service quality and expense management, and enhanced organizational productivity through enhanced voice/uc intelligence.

3 The SecureLogix Managed Security Service for Voice (MSSV) delivers real-time voice network monitoring, analysis, oversight, and protection provided by expert-level system engineers and analysts. It combines voice/uc threat monitoring and mitigation services with network utilization and usage intelligence. The result is a secure and efficient enterprise UC environment optimized for quality and cost. MSSV gives you maximum insight into the voice network details needed for managerial decision support. Armed with MSSV, you can see and respond to voice threats that may have been previously unidentified. Regular, monthly reporting delivers cost saving recommendations based on network utilization and usage details. Regular reporting keeps your ROI benefits in perpetual focus, and we continually track our progress in delivering cost savings opportunities to you. begin with a rigorous program to baseline infrastructure, traffic, and existing vulnerabilities and threats. Transitions to SIP trunking and UC systems can be properly secured, and the operational network can be baselined prior to new system deployment, and measured for post-deployment costs, benefits, and real-world, operational ROI. MSSV can collect intelligence and implement security policies across any mix of TDM/SIP/ UC infrastructure for fully unified, enterprisewide visibility and control. All customers benefit from specific and generalized intelligence and best practices profiled across other MSSV customers. The SecureLogix MSSV ensures that you receive the maximum benefit from your ETM System investment. Through the MSSV, you can leverage SecureLogix as an extension of your staff. We can perform targeted investigations, analyze and problem solve around specific issues, produce actionable recommendations, profile new and emerging threats, and build, deploy and manage enterprise-wide voice/ UC security and cost management policies. Our structured, multi-year, iterative MSSV program plan ensures realistic goal attainment. It helps ignite a renewed focus on expense reduction while protecting against severe and costly threats that could not previously be addressed. We

4 Prevent malicious or unwanted voice traffic to dramatically boost your security, compliance, and cost reduction efforts PROBLEM SOLUTION 360 Perimeter Security Voice Analytics to Reduce Financial Losses and Manage Expenses Centralized Policy Control Unparalleled Insight for Informed Decision Making & Vendor Management Compliments existing data network security solutions and services to complete the enterprise security perimeter. Analysts continually monitor, analyze and block internal financial loss and external attacks targeting traditionally unmonitored voice/uc networks. Prevents network security breaches and virus infections via voice/uc infrastructure. Blocks modem attacks, harassing/threatening calls, voice fraud / toll fraud, and voice spam. Can identify and mitigate Telephony Denial of Service (TDoS) attacks and social engineering schemes. Transitions to SIP/UC open enterprise to further risk and heightened need for security completeness. Provides unique traffic records and recordings for forensics including toll fraud, ISP calls, harassing callers, and social engineering. Ensures greater diligence for regulatory compliance Reduces costs associated with making point-in-time infrastructure planning, capacity growth, and concurrent call licensing decisions with limited information. Reduces telecom expenses by identifying LD abuse and other unauthorized use of corporate voice service and resources. Optimizes voice infrastructure and services such as underutilized trunks, fax resources, exhausted SIP sessions, and phone extensions. Baselines telecom infrastructure and utilization for most cost effective VoIP/UC migration buildout. Data is regularly collected, analyzed, and presented to MSSV customers to guide business decision making. Improves business operations with employee or departmental productivity and efficiency reports showing call volumes, unanswered calls, and other details. MSSV team can work proactively to develop voice/uc security and management policies, or react in a timely manner to meet new threats or opportunities. Single-point of expert policy design and implementation across TDM and/or SIP environments with real-time ability to implement proactive changes. Independent of moves, adds, changes in underlying infrastructure. Provides reports across a broad set of performance metrics, grouped into six areas: Security and Safety, Fraud, Resource Utilization, Compliance, Productivity Loss, and Infrastructure Health. Reports critical call events that are difficult, if not impossible to detect, with other systems. Proactively manages internal and external resources such as Telco contractors, carriers, IT maintenance, accounting support, etc. Provides regular report-outs which can be used as base material to manage, direct and inform the broader organization.

5 Secure & Cost Efficient Transition to UC Out-Tasking and Staff Augmentation Analyzes the types, volumes, trending, and traffic patterns of current calls across all your office locations for more cost efficient and right-sized transition to SIP/UC systems and concurrent calls capacity from service providers. Maintains centralized, consistent voice/uc policies during transition to SIP/UC. Documents real-world, operational savings/roi from transition to SIP trunking and UC. Augments existing IT resources as most effective operators of SecureLogix solution. MSSV staff can perform targeted investigations, analyze and problem solve around specific issues, produce actionable recommendations, profile new and emerging threats, and build, deploy and manage enterprise-wide voice/uc security and cost management policies. Provides data to audit supplier performance, proactively maintains health and quality of voice/uc network, and responds to threats and emergencies such as calls to 911.

6 A full range of services to help you achieve maximum ROI Services Portfolio SecureLogix offers a full portfolio of Support, Professional, and Managed Services to help you meet your organization s voice/uc security and intelligence needs. We offer product centric Support Services, project oriented Professional Service to help customers achieve maximum ROI. MSSV Optimization & Evolution Maintenance & Tuning Out-Tasking Support Assisted Operate Training Monitoring & Response TACTICAL PRODUCT SUPPORT PROFESSIONAL MANAGED STRATEGIC VALUE / ROI Customer Technical Support Planning & Deployment Hosting

7 7% Actionable Insight Unequalled insight into voice application usage and performance results in clear identification of issues and paths to resolution. Effectiveness of proactive policies are measured to ensure our customers are optimally protected. Five sites above have unacceptably high inbound unanswered call rates, affecting customer satisfaction typically due to voic , IVR or circuit mis-configuration. Call Volume 80,000 70,000 60,000 50,000 40,000 30,000 20,000 10, % Inbound Unanswered Calls 100% 99% 100% 100% 18% 5% 1% 3% 1% 2% 1% 1% 1% 1% 120% 100% 75% 80% 60% 40% 20% 0% Percent Unanswered Terminated Call Volume Corporate Facility - Terminated Inbound Calls Harassing caller termination policy shown to be effectively protecting the customer during a rapidly increasing incidence of aggressive harassing caller campaigns. Site A Site B Site C Site D Site E Site F Site G Site H Site I Site J Site K Site L Site M Site N Site O Site P Site Q Unanswered Calls Unanswered % 0 May June July August Real-time alarms can be set to discover incidents such as Toll Fraud or to detect unanticipated effects of network changes, with ability to measure effectiveness of remediation program. Long Distance Call Volume Outbound Long Distance Calls on Customer Switch Number of Fraudlent Calls Proportion of Fraudlent Calls Directed at Contact Center Elsewhere Contact Center Our Fraudulent Callers database helped this customer identify Social Engineering activity in their payments contact center. 0 January February March April May June July August September 0 May June July August

8 MSSV program plan helps your organization with realistic goal attainment. MSSV Program Plan A structured, multi-year, phased MSSV program plan helps your organization with realistic goal attainment. It begins with a rigorous and scientific program to baseline infrastructure, traffic and existing vulnerabilities and threats. START Yr 1 Utilization Yr 2 Utilization Toll, DA, Call Abuse LD, Intl and Local Call Abuse DoS/Spam/Harass DoS/Spam/Harass Blocking Tie Line Study Modem Registration Modem Blocking Unauth Modem Main Ports Initial Perf Rep Ongoing Perf Rep Tuning Underused 1FB Memo LD / Intl Usage Initial Usage Rep Ongoing Usage Rep Tuning Resource Utilization Memo Modern Usage Initial IPS Update IPS Ongoing IPS Tuning Recover Capacity Unauth Traffic Final Security/ROI Recommendations Initial F/W Update F/W Ongoing F/W Tuning LD over Local Study Detailed ROI Analysis DISCOVERY MOBILIZATION ACTUALIZATION CONTINUATION

9 Copyright 2009 SecureLogix Corpora.on. All Rights Reserved. ETM, SecureLogix, SecureLogix Corpora.on, the ETM Emblem and the SecureLogix Diamond Emblem are trademarks or registered trademarks of SecureLogix Corpora.on in the U.S.A. and other countries. All other trademarks men.oned herein are believed to be trademarks of their respec.ve owners. Copyright 2009 SecureLogix Corpora.on. All Rights Reserved. ETM, SecureLogix, SecureLogix Corpora.on, the ETM Emblem and the SecureLogix Diamond Emblem are trademarks or registered trademarks of SecureLogix Corpora.on in the U.S.A. and other countries. All other trademarks men.oned herein are believed to be trademarks of their respec.ve owners. * For informa.on on Nigeria dialing plans hzp:// **For informa.on on Nigeria dialing rates hzp:// verse/explore/interna.onal- rates.jsp# Copyright 2009 SecureLogix Corpora.on. All Rights Reserved. ETM, SecureLogix, SecureLogix Corpora.on, the ETM Emblem and the SecureLogix Diamond Emblem are trademarks or registered trademarks of SecureLogix Corpora.on in the U.S.A. and other countries. All other trademarks men.oned herein are believed to be trademarks of their respec.ve owners. MSSV Operational Updates MSSV provides regular project reporting with a focus on analysis over raw data, with a clear linkage to business benefits. We concentrate on key security findings and efficiency/productivity/cost savings opportunities. An executive level format aids rapid decision-making support. August 2010 Company X Voice Network Security & Management 8/17/10 Cat. Red MSSV OPERATIONAL UPDATE Home Office Operational and Security Analysis Cost Impact: 1,681 minutes long, $1, telephone call to a Nigeria cell phone. Recommend Ac3on: Establish an ETM policy rule to terminate or no.fy on long Interna.onal calls. Cost Impact: Site using xxxx to call local Sites. Na.onal monthly savings of $11,813 Recommend Ac3on: Training employees, pos.ng of local numbers for near- by Sites by telephones. MSSV OPERATIONAL UPDATE MSSV OPERATIONAL UPDATE Cat.Yellow Cat.Green Produc3vity Impact: Three extensions combined for 13,979 Unanswered and 7,441 Busy calls. Recommend Ac3on: Verify the extensions are working properly and are s.ll ac.ve. A monthly operational, security and cost savings update package prepared by: SecureLogix Corporation Cost Impact: (000) showed a substan.al devia.on from the normal pazern seen for Interna.onal calling with several long dura.on calls. Recommend Ac3on: Ensure this extension s calls are business related. Protect against future Interna.onal toll charges via ETM policy if necessary. Direct any ques.ons to: Chad M Finley CISSP Sr. Voice Security Analyst cfinley@securelogix.com Security Impact: A sandwich shop in Cedar Rapids had 300 minutes of access to a Company X modem. Recommend Ac3on: Create an ETM rule to enhance security for the modem. (2- Factor Authen.ca.on) Security Impact: Outbound modem calls can be used for a mul.tude of business needs, but they can also PRODUCTIVITY IMPACT: be used to exfiltrate data from the Company X network circumven.ng network firewalls, data filters and IPS. Recommend Ac3on: Establish a list of authorized des.na.ons for modems and enforce (555) via ETM policy. and (555) were never answered during the month of July despite a combined 18,280 azempts. These two numbers always returned either a ring or a busy tone. This indicates a problem on the lines and the number of call azempts (11,816 on x ,464 on x- 4092) suggest these are high demand services. 56% of the calls to received a busy tone. The 5,427 calls also indicates this is a high demand service MSSV OPERATIONAL UPDATE RECOMMENDATION: According to records, (555) is the Maintenance Modem Determine physical loca.on of this modem and verify opera.on Since this modem has not func.oned properly in several months, it is possible this modem is not required. Get with caller to see if calls can be discon.nued. (555) is not properly iden.fied in the Directory Follow same ac.ons as Modem A above. COST SAVINGS IMPACT: RECOMMENDATION: (000) answers 38% of all calls, indica.ng 20 outbound this is a ac.ve calls line. The for 1,769 minutes to Nigerian Use ETM Firewall to limit dura.on of Interna.onal calls high number of busy calls suggests more resources cell phones* may be needed to 8 Interna.onal calls had a dura.on over 4 hours for handle the volume this number experiences. 3 different source numbers, 3 different des.na.on numbers the month. No other call exceeded 8 hours. 1,681 minutes came on a single $1, telephone call. Put a policy in place to either terminate or e- mail This could be an occurrence of Interna.onal revenue share fraud security, fraud detec.on department, or SecureLogix as defined by the Communica.ons Fraud Control Associa.on. when an interna.onal call exceeds this limit. hzp:// 1,769 minutes $0.61/minute** $1, Start Time - By Second In/Out Internal Number External Number Dura.on (minutes) Type Call Details Des.na.on Country 7/13/ :15 Outbound [1](555) [234]() , Voice INTL Nigeria

10 MSSV is your quickest and assured path to complete voice/uc network protection and ROI. FEATURE FUNCTIONALITY MSSV provides a portfolio of reports and analysis aimed at delivering important decision making information in a regular and timely manner. The delivery of key findings is organized across six (6) core reporting areas that are the thematic pillars of the service. Each is defined below along with sub-listings of the specific reports and analysis taskings utilized to drive results and value for each service theme. Voice Fraud Internal and External Reduce financial losses by preventing toll fraud attacks in real-time and detecting and preventing phone-based identity theft and social engineering schemes aimed at stealing customer information: Social Engineering Long Distance and International Calls Firewall and IPS Policy Management Unauthorized Toll Calls Fax Spam Multiple Call Trends Voice Network Security Prevent restricted data network access, misuse and abuse: Harassing Callers Calls to ISPs Firewall and IPS Policy Management 911 Policy & Alerts Modem Security Multiple Call Trends Calls to Restricted Numbers Resource Utilization Reduce corporate voice/uc expenses by using resource optimization reports to baseline, right size and plan trunking infrastructure, measure utilization rates for voice/uc resources and services, improve call routing plans, highlight VoIP toll bypass opportunities, and plan the most cost effective VoIP/UC migration build-out: Right Size Digital Trunks Unused Analog Lines Tie Line Study Directory Assistance Unanswered and busy Long Distance and International Calls Billing Plans

11 Compliance and Data-Loss Prevention Secure the voice/uc network edge from all forms of voice threats including restricted network access, data leakage, customer ID theft, fraud and abuse to help complete the protection of the corporate perimeter and strengthen regulatory security compliance measures Modem Registration Block Unauthorized Modems Regulatory Compliance Firewall and IPS Policy Management Calls to ISPs Productivity Loss Improve business operations, productivity and training with employee productivity alerts and reports showing call volumes, durations and other details such as lower-than-expected volumes on key resource lines, or traffic patterns for inbound customer calls to aid staffing decisions or efficient call routing Excessive Unanswered or Busy Calls to Restricted Numbers Harassing Callers Calls to ISPs Long Distance and International Calls Business Operations Abuse/Misuse/Anomalies Infrastructure Health and Status Reduce the effort of your staff to reap the benefits of your ETM System by out-tasking our team of telecommunications professionals to help complete day-to-day voice/uc administration tasks. ETM System Administration Extension Masking Dial Plan ETM System Moves, Adds and Changes (MACs) Telecom/PBX Alarms Directory Management

12 SecureLogix Corporation San Pedro Ave. Suite 820 San Antonio, TX securelogix.com 2011 SecureLogix Corporation ETM, TeleWatch Secure, TWSA, We See Your Voice, Unified Communications Policy Manager, SecureLogix, SecureLogix Corporation, as well as the ETM Emblem, SecureLogix Emblem and the SecureLogix Diamond Emblem are trademarks and/ or service marks or registered trademarks and/or service marks of SecureLogix Corporation in the U.S.A. and other countries. All other trademarks mentioned herein are believed to be trademarks of their respective owners. SecureLogix technologies are protected by one or more of the following patents: US 6,226,372 B1, US 6,249,575 B1, US 6,320,948 B1, US 6,687,353 B1, US 6,700,964 B1, US 6,718,024 B1, US 6,735,291 B1, US 6,760,420 B2, US 6,760,421 B2, US 6,879,671 B1, US 7,133,511 B2, US 7,231,027 B2, US 7,440,558 B2, CA 2,354,149, DE 1,415,459 B1, FR 1,415,459 B1, and GB 1,415,459 B1. U.S. Patents Pending.