BSNL IDC Hosted Firewall Service. Total Network Security

Transcription

1 Total Network Security

2 Advantage BSNL IDC India s first Uptime Institute Certified Tier-III data centres with combined connectivity and IT services availability from BSNL Low latency Internet Data Centres (IDC) / cloud services over BSNL s wide national broadband network Highest levels of data integrity and security with IDCs located in BSNL s Five-level secure facility True utility models with entry level, growth and power usage options Globally proven integrated service management tool to manage options, provision services, metering and reporting One of India s greenest data centres with best-in-class cooling and power management infrastructure Secure. BSNL IDC ensures the highest levels of security for your data, with more than 25 security layers. We are ISO certified and SSAE 16 / ISAE 3402 compliant. Connected. BSNL IDC maximises network uptime via a high-performance, high-availability architecture that provides redundancy and fault tolerance on all axes providing a LAN like experience. Simple. BSNL IDC ensures faster time to solution. A singledashboard, self service management portal allows you to provision services, manage user and system variables. A BSNL & Dimension Data initiative Bharat Sanchar Nigam Limited is the world s seventh largest telecommunications company with 6,14,755 km of optic fibre connecting 7,330 cities / towns across India. Dimension Data is an NTT Group company and a leading provider of ICT solutions in 49 countries.

3 As long as your organisation s network is connected to the Internet, a firewall is your primary defence against intrusions. Cyber-criminals and their tools are becoming more sophisticated, so individual hackers need less expertise to access sensitive data. Your firewall plays the all-important role of preventing unauthorised access... to your networks. The effort and investment required to implement comprehensive firewall security is significant. Devoting your IT resources for this purpose is suboptimal. It makes business sense to outsource the entire task of network security. BSNL IDC Hosted Firewall Service affords you peace of mind on the security front, allowing you to focus on your business. This is a managed solution, meaning that we take care of the software licenses, hardware, and management of the security system all the way to monitoring and reporting. With a centralised solution, you get better information security at a lower operational cost compared to an onpremise setup. Your network is secured against the entire range of threats and attacks originating from the Internet. The Service also prevents sensitive internal data from reaching the outside. Dedicated, 24x7 monitoring identifies threats before they reach your network. The Service offers unparalleled performance, and scalability for large-enterprise as well as small-business networks. With a managed security solution, your protection is always up to date. You are protected against emerging threats, as well as persistent and dynamic attacks. But you still retain 24x7 control over your defences: You can monitor firewall status, log data, statistics, and reports, and enforce policies for users, data, and applications. Security First Control Access A firewall needs to quickly identify Among the many functions of BSNL IDC and block complex threats before they Hosted Firewall Service are Web filtering penetrate through to your network and application control. You can curb andapplications. BSNL IDC Hosted Firewall access to applications such as instant Service is a best-of-breed solution, messaging and streaming video, which providing the protection you need lower productivity and contribute to while integrating security features such as network congestion. In fact, you get... Intrusion prevention, Application control, fine-grained access control to many... Web filtering, antivirus,antispam and Data Web-based applications. Loss Prevention (DLP). Maintain Continuity Dedicated Virtual Firewall If the firewall fails, a dedicated backup As part of the Service, you get a dedicated firewall immediately begins operating. This virtual firewall instance (Virtual Firewall Active/Active failover of the Solution Domain, or VDoM) for each client... means high network availability with no with customisable resource allocation. You operational interruptions. also get a dedicated Virtualised Firewall Management Solution as an optional service for your VDoMs, with a dedicated Administrator account to manage... the firewall. Customise your... protection level by choosing add-ons: Antivirus engine and Intrusion Prevention System (IPS)

4 Firewall Services Delivery architecture

5 Key Features Patch and Release Management: 24-hour monitoring and support, combined with constant updating of threat definitions, means your security shield is up-to-date at all times. Visibility and control: Flow-based inspection gives you complete visibility of your network, from remote offices... to headquarters. Application and user policies: Beyond firewall functionality, the Service gives you granular control over applications, data, and user access. You can assign role-based privileges, defining and enforcing policies for almost any application on your network. High Availability: The firewall is configured in Active/Active failover mode, so there is no Service downtime or operational interruption. SSL and IPv6: The Service supports SSLencrypted traffic inspection and IPv6 for all firewall functions. Antispam capability: Spam messages and malicious attachments generated by automated systems are detected, quarantined, and blocked. Logs and reports: You get access to detailed network usage / performance reports via a secure portal. VPN functionality: Integrated VPN functionality provides secure communications across networks and between individual hosts. The firewall scans and secures all VPN traffic. WAN Optimisation: This capability accelerates applications over your WAN by intelligently reducing the amount of data that needs to move between applications and servers, this improves... application performance and reduces network congestion. Management and administration: By setting up access based on IP addresses, you can control how much traffic reaches your network, and from which locations. Firewall Change Management Software allows you to keep the firewall always configured according to corporate security policy. Data Loss Prevention (DLP): DLP technology uses pattern matching to identify sensitive data, such as credit card numbers, that is moving along the network. It blocks the transmission of such information, and provides audit trails that aid in policy compliance. You can configure the actions to be performed when suspicious activity occurs. Business Benefits Here is a broad comparison of a traditional on-premise firewall versus BSNL IDC Hosted Firewall Service. Initial investment Maintenance / management costs On-premise firewall High Costs include procuring of software licenses and hardware, hiring and training administrators and other staff High Requires skilled administrative and support staff for hardware and software maintenance and updating BSNL IDC Managed Firewall Service Zero You pay for firewall capabilities as a utility, while retaining full control over configuration Low The Service is supported 24x7 from BSNL s global command centre (GCC) experts; software upgrades are part of the Service Ease of implementation Low Need to carefully plan scalability, features required, and risk to business from vulnerabilities High The Service can be configured in a matter of hours, with choice of add-ons as the only variable Security administration overhead Regulatory compliance Significant Use of internal IT staff is inefficient Variable Need to rely on administrators to ensure security policy compliance Low Automated patch and release management leads to optimised workloads Ensured Logs are retained for an appropriate, stipulated time period, ensuring regulatory compliance

6 Optional Features Antivirus / Antispyware In addition to the firewall and other functionalities of the Service, you can optionally add on an antivirus/antispyware engine. This includes the traditional proxybased antivirus database option, and a high-performance, flow-based option. The latter allows quick scanning of files of any size, while maintaining high levels of performance. Flow-based file scanning also searches the contents of compressed files to detect hidden threats. With the flexibility to choose your antivirus engine, you can balance performance and security requirements for your environment. Intrusion Prevention Intrusion Prevention System (IPS) technology provides protection against current and emerging network-level threats. In addition to signature-based detection, where traffic matches the signature of an identified threat, IPS performs anomaly-based detection. Here, the system alerts you to network behaviour that seems abnormal, and which might therefore be an attack attempt. Essentially, this provides an extra layer of protection by blocking not only known threats, but also network traffic that might comprise... a threat.

7 Service Options for BSNL IDC Hosted Firewall Service Pre-packaged options for the Service include: Standard offering Firewall service, configurable as per... client requirements with respect to the number of concurrent sessions and throughput bundles Extended offering Includes Intrusion Prevention System (IPS) and/or anti-virus capabilities Firewall (Standard Offering) Express Standard Growth Power Supreme Firewall throughout (Mbps) Number of concurrent sessions 100, , , ,000 1,000,000 IPS Add-on (Extended Offering) Express Standard Growth Power Supreme Firewall throughput with IPS (Mbps) Antivirus Add-on (Extended Offering) Express Standard Growth Power Supreme Firewall throughput with anti-virus (Mbps)

8 Contact Us For Marketing Enquiries: General Manager - Enterprise Business 4th Floor, 413, Bharat Sanchar Bhawan, Janpath, New Delhi Tel: Fax: [email protected] Bengaluru Dimension Data India Limited 3rd Floor, Wing B, E2 Block, Silver Oak, Manyata Embassy Business Park, Nagavara, Bengaluru Tel: [email protected] Mumbai Dimension Data India Limited 2nd Floor, Trade View, Kamala Mills Compound, Pandurang Budhkar Marg, Lower Parel, Mumbai Tel: [email protected] New Delhi Dimension Data India Limited #51, Okhla Industrial Estate Phase III, New Delhi Tel: [email protected]