Global Leader in DDoS Mitigation Service Provider Enablement 3.0 Achieving Accelerated Business Gain BENEFITS Comprehensive product range to capture different market segments Turnkey white-label partnership Attractive, transparent revenue-sharing model Explore new revenue streams, lock in existing customers Complement existing protection capacity and scalability Multi-tenant Partner Portal for Real-time Visibility and Customer Management Nexusguard (SPE) is a turnkey, lowcapex and easy-to-operate solution that enables service providers to provide end-customers with essential DDoS and cyber threat protection solutions all marketed under your own brand. The SPE program is built upon Nexusguard s Cybersecurity Platform, which encompasses Application Protection (AP), Origin Protection (OP), and DNS Protection (DNSP). The three pillars work with and complement each other to provide comprehensive protection on websites, applications, backend infrastructure, and DNS servers from the latest threats, without the cumbersome tasks needed in the setup or configuration of any hardware and software by yourself. Nexusguard s Cybersecurity Platform Application Protection Origin Protection DNS Protection Rather than just focus on protecting public-facing elements, the SPE program allows you to meet the more diverse needs of a larger group of customers and capture a larger share of profits in the fast-growing market for DDoS mitigation. The program delivers the technology, cloud scalability and know-how necessary for service providers to address new opportunities with quicker time-to-market and time-to-profit.
Benefits BENEFITS Comprehensive product range to capture different market segments Turnkey white-label partnership Attractive, transparent revenuesharing model Explore new revenue streams, lock in existing customers Complement existing protection capacity and scalability Multi-tenant Partner Portal for Real-time Visibility and Customer Management Comprehensive product range to capture different market segments Nexusguard s Cybersecurity Platform is underpinned by three pillars -- Application Protection (AP), Origin Protection (OP), and DNS Protection (DNSP). Together they offer robust, holistic protection on the entire network from the latest network and application threats. This compelling program is one big step ahead of other reseller programs that cover only web application protection. Empowered by Nexusguard s three-pillar approach, the SPE program allows you to bundle our products with your flagship products and formulate your pricing strategy to capture different market segments. This flexibility in product bundling and pricing strategy enables maximize the venue and profit potential each segment holds. Businesses or organizations mainly relying on their websites and web applications undoubtedly need the basic protection from the AP solution. The OP solution, which protects all network elements, is especially beneficial for organizations that cannot afford any downtime of their network assets. DNSP is specifically designed to protect mission-critical domain name services from DNS attacks. Turnkey white-label partnership Requiring no upfront investment, the SPE program is a turnkey solution for service partners looking to tap into the DDoS protection service market through a strategic partnership. By partnering with us, you will be able to deliver enterprise-grade DDoS protection services under your brand. Whether you are a small hosting service provider without a big budget, a large ISP looking for a reasonable and functional alternative to on-premise options, or an MSSP looking for a cloud infrastructure to complement your existing mitigation solution, this program allows instant infrastructure ramp up without the cost of technology ownership and additional IT resources. 2
BENEFITS Comprehensive product range to capture different market segments Turnkey white-label partnership Attractive, transparent revenuesharing model Explore new revenue streams, lock in existing customers Complement existing protection capacity and scalability Multi-tenant Partner Portal for Real-time Visibility and Customer Management Attractive, transparent revenue-sharing model Our partnership is based on a fair and transparent revenue sharing model. That means that we only make money when you do. Meanwhile, you enjoy great savings from infrastructure and hardware setup, while the ongoing operational cost is very low. We simply split the profits at an agreed upon rate between your business and ours. Incentives are also available to reward partners for meeting and exceeding mutually agreed targets. Explore new revenue streams, lock in existing customers Joining the SPE program allows you to tap into the highly lucrative DDoS protection service market, yet without distracting from your core business. It translates into business value and market differentiators, instantly giving you an additional edge over rivals. With an expanded product portfolio, you can attract new customers and upsell the services to your existing customers with quicker time-to-market and time-to-profit. On the other hand, it is also natural for your customers to look up to you in the first place for help with anti-ddos solutions. The SPE program creates a win-win-win situation at its finest. Complement existing protection capacity and scalability Partners with sufficient bandwidth capacity can leverage on the program to enhance their technology and expertise to deal with DDoS attacks, such as ISPs. Hosting service providers who used to rely on blackhole to mitigate DDoS attack can also upgrade their services to infrastructure protection to address the growing demand from customers for protection service while heading off collateral damage. Nexusguard s solution perfectly addresses the potential problems faced by ISPs or hosting service providers. We offer flexible deployment models, i.e. Cloud and Hybrid, to integrate into your existing solutions, depending on your existing network capacity, legacy setup and data residency requirements. Even for MSSPs already offering anti-ddos services, our integrated solution that combines DDoS attack mitigation, WAF and caching and load balancing will definitely enhance their existing service offerings. 3
BENEFITS Comprehensive product range to capture different market segments Turnkey white-label partnership Attractive, transparent revenuesharing model Explore new revenue streams, lock in existing customers Complement existing protection capacity and scalability Multi-tenant Partner Portal for Real-time Visibility and Customer Management Multi-tenant Partner Portal for Real-time Visibility and Customer Management Designed with an intuitive interface, the multi-tenant Partner Portal features a comprehensive dashboard that integrates charts and graphs showing all of the traffic and attack analytics of all your customer websites under protection. You can manage multiple customer accounts, configure their mitigation settings and even control access all within the same platform. You have the flexibility to customize services for each customer to provide them with exactly the level of service promised. Provisioning is very fast and all it takes is just a few minutes. Among other things, you can view and download detailed event and attack logs on the portal. This gives administrators the ability to troubleshoot a problem and make a correct diagnosis. Nexusguard is a PCI-certified service provider (Level 1) guaranteed with the capabilities to process, store and transmit credit card data and sensitive information on our infrastructure, which are PCI DSS 3.0 compliant, including all data centers responsible for delivering the specific services. One notable benefit of engaging Nexusguard as a vendor is that it allows service providers and end customers, especially those in the financial service, e-commerce and gaming industries, to reduce the cost of meeting PCI DSS requirements. Others pursuing PCI certification will also find it more cost-effective to integrate Nexusguard s pre-certified components, such as the WAF, as the required items for assessment. DSS COMPLIANT Service Provider Level 1 4
Deployment Models DEPLOYMENT MODELS Hybrid Model Cloud Model Depending on your need, the pure Hybrid model and the Cloud model are available for the SPE partner to choose from. Both deployment methods leverage on our global mitigation capacity of more than 1.44Tbps spread across scrubbing centers located in San Jose, Miami, Los Angeles, Ashburn, London, Amsterdam, Singapore, Hong Kong, and Taiwan. Such enormous mitigation capacity ensures that Nexusguard can quickly and effectively handle the most threatening DDoS attacks regardless of their size or type, and with no lag time between attack detection and mitigation. LONDON AMSTERDAM SAN JOSE LOS ANGELES ASHBURN MIAMI SINGAPORE Nexusguard Global Scrubbing Centers 5
Hybrid Model DEPLOYMENT MODELS Hybrid Model Cloud Model The Nexusguard SPE Hybrid Model combines on-premise and cloud mitigation capacities and functionalities. The solution is ideally suited for customer environments that demand extremely low latency and multilayered protection. In some jurisdictions, data sovereignty is of utmost importance to service providers. Hybrid implementation automatically selects the appropriate mitigation location and employs the optimal mitigation technique depending on the sources, characteristics, tools, and volume of a given attack. How It Works Domestic and international traffic are handled in tandem by on-premise appliances and globally by Nexusguard s cloud to ensure the lowest latency and the shortest time to mitigation. On-premise and cloud devices also share intelligence about an attack in order to accelerate and enhance mitigation once an attack reaches the cloud. After scrubbing, clean traffic is routed back to customer and attack reports are generated automatically for the on-the-fly analysis. Legitimate Traffic In-Country Traffic Attack Traffic Partner s Scrubbing Center Legitimate Traffic Backend Web Server Global Traffic Attack Traffic Nexusguard s Scrubbing Centers
Cloud Model DEPLOYMENT MODELS Hybrid Model Cloud Model Besides the hybrid model, Nexusguard delivers pure Cloud model that enables you to quickly expand existing DDoS protection services, and even launch new ones. You can do it without any additional capital expenditures for infrastructure or manpower. How It Works During an attack, malicious traffic is eliminated at Nexusguard s scrubbing centers so as to not consume the service provider s bandwidth. Inbound traffic is redirected to the nearest scrubbing center, where DDoS filtering and routing techniques are employed to reduce DDoS traffic interference. Clean traffic is then routed back to your customer, while analytical reports on the attack are generated. Legitimate Traffic Attack Traffic In-Country Traffic Legitimate Traffic Nexusguard s Scrubbing Centers Backend Web Server Attack Traffic Global Traffic 7
SPE Partner Support Business Support In addition to the benefits you are entitled to as a Nexusguard SPE Partner, several support resources are available to help you operate and grow your DDoS protection services: Business planning and management support Public relation and marketing support Enablement toolkits Program onboarding and operational training Updates on the latest cyber threats Technical Support & Emergency Service The SPE program offers 24x7 support to partner to address problems related to platform, attacks and services. Whenever partner experiences a problem that requires support from Nexusguard, our security experts are always ready to response to your inquiry at any time. 8
Deployment Workflow Project kick-off SPE hardware and software development Partner Portal deployment UAT Training Preparation for product launch Introduction to Nexusguard s project team Project briefing on development, administration, customer portal, and service modules for end-customers Hardware purchase and delivery Hardware installation and setup Software deployment Develop a development plan Agree on deployment timeline Implement and verify the trial portal UAT plan UAT testing UAT sign-off SPE sales training SPE product training SPE operational training Customer packaging and pricing Business plans and forecasts Marketing plans and marketing collateral Invoicing and payment process Partnership agreement sign-off 2010405-EN-A4 contact@