MANAGED EXCHANGE SOLUTIONS Secure, Scalable and Compliant Hosted Environments

2015 SOLUTION BRIEF MANAGED EXCHANGE SOLUTIONS Secure, Scalable and Compliant Hosted Environments NET ACCESS LLC 9 Wing Drive Cedar Knolls NJ 07927 www.nac.net

Table of Contents 1. Introduction... 2 2. Net Access Managed Services Solution Process Flow... 3 Consultation and Design... 3 Implementation... 3 Ongoing Management and Support... 3 3. FLEX Services Solution Components... 4 4. Use Cases & Solution Overviews... 5 Use Case #1 - Single Site... 5 Solution Diagram... 6 Use Case #2 Multi-site... 7 Solution Diagram... 8

1. Introduction For 20-plus years, Net Access has been passionate about finding smarter, better ways to solve our clients technology challenges. Leveraging our portfolio of enterprise data center services - including cloud, colocation, networking and managed services - we re able to craft a multi- technology thinking infrastructure that s flexible enough to change on-the-fly to optimize speed, efficiency and reliability. These managed solutions takes full advantage of our next-generation data centers, our knowledgeable and tenured staff and our 24/7/365 Network Operations Center. We believe that this attention to detail and dedication is why businesses that rely on their critical IT infrastructure also rely on Net Access. Communication within a company is of utmost importance. From interns to executives, email is a primary means of communication and going without it for even minutes can prove detrimental to workflow. In many cases, the larger hosted email providers do not offer the level of support necessary for such a critical service. Long wait times and staff unfamiliar with the specific customer environment can lead to frustration and further delays without any detailed information. Their "one size fits all" email solution deployment model may not be the right one for your business needs. Our Managed Exchange solution allows customers to leverage Net Access 15+ years of system design, implementation, and management of messaging environments. After assessing your specific situation, a fully customized solution will be designed and implemented to meet your availability, compliance, and security goals. This secure solution will be dedicated to your business, can be scaled to meet compliance requirements with encryption, archiving, and context filtering, and will ensure the highest availability of uptime for your messaging needs. You will also have direct access to our dedicated support staff to assist you with any issues. All of our managed infrastructure solutions use an OPEX price model. This converts capital expenditure cost into a manageable monthly fee, providing easier budgeting due to a consistent spend. Without high upfront costs for additional hardware or additional staff, customers can enact upgrades and expansions quickly and easily. By reducing CAPEX for infrastructure, our clients can reinvest into what matters most: the core business.

2. Net Access Managed Services Solution Process Flow Consultation and Design Net Access Engineers will meet with the customer in a collaborative session to define the requirements and review the proposed solution. A dedicated engineer provides consultation and planning to ensure that the deployment of the solution meets the client s deadlines, expectations, and functionality. Net Access strives to ensure all customers are provided a service that is the right fit for them. Some environments are small and static and some environments are large and need to scale. Net Access engineers can design a solution based on a number of needs. Implementation Net Access will perform a cooperative test and turn up of the design, working with the customer to verify all components meet their requirements, expectations, and security concerns. A dedicated Managed Services Engineer is available during this process to make any necessary adjustments and ensure that the client is satisfied. Net Access will also work with third party integrators or vendors that will be involved in the deployment of the solution to simplify the process. Ongoing Management and Support Managed services are fully maintained by Net Access and monitored by our Network Operation Center 24/7/365. Ongoing support of hardware and software in the proposed solution is provided by Net Access and our technical staff. All of our solutions include proactive updates, hardware replacement, configuration assistance, and security auditing.

3. FLEX Services Solution Components The following FLEX Services are utilized in the solutions outlined in this document: FLEXSecurity Managed Firewall Dedicated next generation firewall with options for Remote Access, Site-to-Site VPN, and High Availability. Security features can include full UTM (unified threat management) - deep packet inspection intrusion detection, and advanced screening and filtering for URL, Web, Email, SPAM, and viruses. Available as a virtualized or hardware appliance. FLEXServer Rapidly deployed, securely hosted dedicated servers that can be connected to the Internet, other Net Access FLEX services or a client s existing network infrastructure to create a true hybrid solution. Net Access provides maintenance of the physical hardware, the supply of power, the network connectivity and provisions any purchased upgrades of the hardware. FLEXVirtualDC Our virtualized enterprise data center offering. Available as a dedicated or multi-tenant solution, FLEXVirtualDC allows clients to deploy, adjust and expand Virtual Machines (VM) on-demand using committed pool of compute, memory, storage and bandwidth resources via a self-service web portal. FLEXBackup Shared, dedicated or combined cloud backup and recovery solution that is securely hosted in a Net Access data center. FLEXBackup can be deployed as a complement to existing on-site office infrastructure, existing infrastructure within a Net Access data center or combined with any of our other FLEXServices. Advanced options include AES-256 encryption, deduplication, and numerous replication, restoration and recovery options. FLEXBridge Layer 2 connectivity inside the Net Access data center providing private 100meg, 1gig or 10gig connections between environments. This allow customers to split their workloads between virtualized cloud and bare metal, and have both on the same LAN behind a pair of firewalls in their cabinet. FLEXLoadBalancer - Virtual or hardware appliance solutions designed to evenly distribute web traffic over multiple servers. Features GSLB enabling multi-site failover, location based application balancing, and even IPv6 to IPv4 conversion.

4. Use Cases & Solution Overviews Use Case #1 - Single Site CUSTOMER PROFILE: An advertising firm is looking to deploy a new Exchange environment to serve employees in the headquarters. They have requested the environment be capable of growth as they plan on adding additional employees in the next year. CUSTOMER REQUIREMENTS: Mail archiving Granular mailbox restore Outlook licensing Spam Filtering NET ACCESS PROPOSED SOLUTION COMPONENTS: Net Access recommended a HIPAA compliant FLEXCloud solution, which included the following FLEX services: FLEXServer FLEXVirtualDC FLEXLoadBalancer FLEXSecurity Firewall FLEXBackup FLEXBridge The proposal also included management by Net Access of all networking devices, storage units, and backups to improve compliance consistency by means of a single IT support staff. SOLUTION HIGHLIGHTS: Net Access suggested a hybrid deployment solution with a mix of physical and virtual machines. Using best practices the solution consists of: Multi-Tenant FLEXVirtualDC, FLEXServer Premium, FLEXSecurity - Firewall, FLEXBackup, FLEXLoad Balancing and some ancillary services including McAfee spam filtering and an SSL certificate. The solution will be deployed at a single Net Access data center with a connection to the customer s existing colocation environment provided via FLEXBridge. Multi-tenant FLEXVirtualDC provides compute and storage resources for a Virtual Firewall, an Active Directory VM and a Witness node VM for the Exchange environment. The FLEXServer Premium servers will be configured in a cluster to provide the primary Exchange environment. System specifications allow for a 20% increase of users and also allow for easy expansion of the environment if there is a need for additional growth. FLEXSecurity- Firewall will be deployed in the FLEXVirtualDC environment to protect the customer s network infrastructure as well as providing an IPSEC VPN tunnel endpoint from the customer s on premise network to our datacenter. FLEXLoad Balancing provides high availability with a pair of physical load balancers for the public facing services of the Exchange environment. FLEXBackup provides the customer a granular restore capability for the Exchange environment in case of accidental email deletion.

FLEXBridge provides Layer 2 connectivity between the FLEXVirtualDC envitorment and the customer s existing colocation environment. McAfee s MXLogic provides mail spoofing, mail archiving, and spam filtering while a UCC SSL certificate will provide a vaild SSL certificate for all public facing services of the Exchange environment. Communications between the virtual environment and remote client office(s) will be secured via encrypted VPN connections, and encrypted backups are to be stored at a remote data center on a daily basis. Solution Diagram

Use Case #2 Multi-site CUSTOMER PROFILE: A large financial institution wants to deploy a new resilient Exchange environment with the least possible chance of downtime and require a solution where their infrastructure is protected at every point of failure. They have employees located in numerous office around the country, and have requested the environment be capable of growth as they plan on adding additional employees in the next year. CUSTOMER REQUIREMENTS: High availability and redundancy at every point of failure 100% uptime Mail archiving Granular mailbox restore Outlook licensing Spam Filtering NET ACCESS PROPOSED SOLUTION COMPONENTS: Net Access recommended a HIPAA compliant FLEXCloud solution, which included the following FLEX services: FLEXServer FLEXVirtualDC FLEXLoadBalancer FLEXSecurity Firewall FLEXBackup FLEXBridge The proposal also included management by Net Access of all networking devices, storage units, and backups to improve compliance consistency by means of a single IT support staff. SOLUTION HIGHLIGHTS: Net Access proposed a hybrid deployment configuration with a mix of physical and virtual machines to provide a solution for the customer s environment across multiple data centers connected together via the FLEXBridge. Using the GSLB (Global Services Load Balancing) both sites will be in an active/active configuration providing the most reliable and resilient configuration. Using McAfee MXLogic the customer is able to retain all messages sent and received by the system for up to 10 years to achieve their regulatory compliance. Using best practices the solution consists of: Multi-Tenant FLEXVirtualDC, FLEXServer Premium, FLEXSecurity Firewall, FLEXBackup, FLEXLoad Balancing and some ancillary services including McAfee spam filtering and an SSL certificate. Multi-tenant FLEXVirtualDC provides compute and storage resources for a Virtual Firewall, an Active Directory VM and a witness node VM for the Exchange environment. FLEXServer Premium servres will be configured in a cluster to provide the primary Exchange environment. System specifications allow for a 20% increase of users and also allow for easy expansion of the environment if there is a need for additional growth.

FLEXSecurity - Firewall will be deployed in the FLEXVirtualDC environment to protect the customer s network infrastructure as well as providing an IPSEC VPN tunnel endpoint from the customer s on premise network to our datacenter. FLEXLoad Balancing provides high availability with a pair of physical load balancers for the public facing services of the Exchange environment. FLEXBackup provides the customer a granular restore capability for the Exchange environment in case of accidental email deletion. FLEXBridge provides Layer 2 connectivity between the FLEXVirtualDC envitorment and the customer s existing colocation environment. Lastly, some ancillary services are required for the Exchange environment; McAfee s MXLogic provides mail spoofing, mail archiving, and spam filtering while a UCC SSL certificate will provide a vaild SSL certificate for all public facing services of the Exchange environment. Solution Diagram