Download - Virtual Firewall Enhanced Service

Virtual Firewall Enhanced Service

Advantages• Ease of Implementation: Savvismanagesthecompletesolution,frominstallation,toconfiguration,toongoingmanagement.

• Leading Technology: Savvisutilizesestablished,Cisco-basedtechnologytodeliveryourorganization’sprotection.

• Expertise:Savvisleveragestheexpertiseofastaffwithdeepexperienceinsupportingfirewallsandrelatedsecurityservices.

• Monitoring on a 24/7 basis:Savvishasskilledresourcestoreactquicklytosecurityproblemsatanytime,dayornight.

Virtual Firewall Enhanced ServiceFirewallshavelongservedascorecomponentsofmostorganizations’securitystrategies.However,thegrowthofsecuritythreatsbothinvolumeandinseverityhavenecessitatedthatorganizationscontinuallyevaluatetheeffectivenessofthefirewallsthatareemployedtoprotecttheirsensitivedata,whilealsonecessitatingthatorganizationsgaugetheirabilitytorespondrapidlytopotentialthreats.

Savvis’VirtualFirewallEnhancedServiceleveragesCisco’s®leadingFWSM(FirewallServicesModule)technologytoprovidevirtualizedfirewallprotectiontoyourorganization,includingvaluableanti-spoofingfunctionality.Incorporatingindustry-leadingbestpracticesforsecurityprotection,theservicecansupportnetworksegmentationbetweenWeb,applicationanddatabaseservers,throughmulti-portfirewallfunctionality.Inaddition,theserviceprovidesanoptionalIPSecAccesscapability,whichpermitsorganizationstocreateasecureIPSectunnelthatcancarryupto5mbpsoftrafficfromSavvis’infrastructuretoasinglecustomerorSavvis-managedendpoint.Sincesomeoftheabove-referencedservicesareofferedseparately,yourSavvisAccountExecutivecanhelpyoutodeterminewhichcombinationofservicesmeetsyourorganization’sspecificneeds.

Asophisticatedsetofsecuritypoliciesandvigilantmonitoringarealsorequiredtokeepexternalandinternalintrudersfromgainingaccesstosensitiveorganizationaldata&systems,andtomaintaintheintegrityofongoingnetworkoperations.However,theinternallaborcommitmentandfinancialinvestmentrequiredtoimplementmulti-tieredsecuritystrategiescanquicklyoccupyITresources,leavingyourorganizationlittletimeorcapitalremainingtofocusonday-to-daybusinessprocessesandtoprotectnetworkassetsfrombeingcompromised.

Support from the Savvis Security Team on a 24/7 BasisSincesecuritysituationscanevolvebytheminute,itisimportantforyourorganizationtoreceiveimmediatenotificationofpotentialsecurityincidents,allowingaresponseplantobeputintoactionasquicklyaspossible.Towardthatend,theVirtualFirewallEnhancedServiceprovidesbothmanagementandmaintenanceoftheservice,includingmonitoringofactivityona24/7basis.Inaddition,ourservicecanaccommodatefirewallpoliciesthatarecomprisedofupto250rules,whichpermitsyourorganizationtoadaptitspoliciestoevolvingsecuritythreats.AswithallofourFirewallServices,Savvispermitsyourorganizationtomakeanunlimitednumberoffirewall

SEcuriTy SErVicES

Savvis IT Infrastructure

rule-changerequests.Foryouraddedsecurity,firewallrule-setsarebacked-uponaroutinebasis,withcurrentconfigurationsstoredatasecure,off-sitelocation.

Toprovidethislevelofsupporttoyourorganization,anexperiencedSecurityEngineerworkswithyourorganizationtoperformareviewofyourfirewallneeds,andyournetwork&systemtopologies.Wealsoreviewyoursecuritypoliciestodevelopandrefineyourfirewallsecurityprocedures.Basedontheinformationthatwehavereviewed,wethenconfigure,install,andmanageyourfirewall,accordingtoyourorganization’suniquerequirements.Onceimplemented,youareabletoreviewyourorganization’sfirewalllogactivitydirectlyandconveniently,viaourSavvisStationPortal.PleaserefertotheAppendixattheendofthisdocumentforfurtherinformationregardingthetypesofreportsthatyou’llbeabletoreviewthroughtheportal.

The Savvis Security LegacySavvisisarecognizedleaderinSecurityServices,andoffersafullrangeofservicesthatincludesManagedFirewalls,IntrusionDetection,Network-basedIntrusionDetectionandWeb&E-MailProtection.Wehavedeepcorporateexperienceininstalling,managingandmonitoringbothfirewallandloadbalancingservices,withsignificantexperienceinprovidingsecurityservicesatourdatacentersandatcustomers’premises.Allsecurityservicesarefully-supportedbyaskilledteamofcertifiedsecurityprofessionals,whoarecapableofdeliveringoperationalprotectiontoyourorganization,everyminuteofeveryday.Atanadditionalcustomercharge,Savvisisabletoprovideafullrangeofsecurity-relatedProfessionalServicestoyou,includingRiskAssessmentServices,SecurityPolicyCreation&DocumentationReviewandWebApplicationVulnerability&PenetrationTesting.

Appendix: SavvisStation Firewall reportingReportingforSavvis’VirtualFirewallEnhancedServiceiscurrentlyavailablethroughourSavvisStationPortal,whichisasecure,Web-basedreportinginterface.Toenhanceyourorganization’soverallsecurity,accesstotheportalisavailablesolelytoindividualswhohavepreviouslybeenidentifiedas“securitycontacts”byyourorganization.Portalsupportisavailabletocustomersona24/7basis,viaaphonecallorane-mailtotheSavvisSupportCenter.

ToprovideyouwithsomeexamplesofthetypesofreportsthatarecurrentlyavailableonthePortal,demoscreen-shotsappearbelow.ForafullexplanationofSavvisStationportalfunctionality(includingserverperformancereporting,networkperformancereportingandbillinginvoiceoptions),pleasecontactyourSavvisAccountExecutive.

SEcurITy SErvIcESvirtual Firewall Enhanced Service

Managed Security Services “Home” ScreenThisscreenprovidesaccesstothevarioustypesofManagedSecurityreportsthatareavailablethroughtheportal,includingreportsforSavvis’Firewall,IntrusionDetection,ManagedVulnerabilityScanning(MVS)andIntegrityMonitoringService(IMS)services.Inthisinstance,summaryinformationisdisplayedfordemoCheckPointandCiscoPIXfirewalldevices.

Firewall Device LogsAdetailedlogoffirewallactivityisavailablefor30daysonarotatingbasis,asappearstotheright.Logsaretime-stampedforyourconvenience.Morefirewallreportingexamplesappearlaterinthisdocument.

Firewall connections (Daily View)ThisscreensummarizesFirewallConnectionsperMinute,bytype(includingTCP,UDPandICMPconnections).Whenanalyzingthisdemodata,yourorganizationmayhavepaidparticularattentiontotheactivitythatoccurredbetween10.00and12.00,unlessthespikeinconnections/minutewasanticipatedbynormalbusinessactivity.


Firewall connections (Weekly View)Similartothepreviousscreen-shot,thisscreen-shotsummarizesFirewallConnectionsperMinute,bytype(includingTCP,UDPandICMPconnections),butforafullweektimeframe.Thefirewallconnectionsshowaconsistentactivitypatternthroughoutthecourseoftheweek.

Weekly reporting of “Average Bits in /Average Bits Out” ActivityHere,wearepresentedwithactivityonasinglefirewallinterface.Ifthisgraphrepresentedactualcustomertrafficactivity(insteadofdemoactivity),yourorganizationmayhavepaidspecialattentiontothe“AverageBitsIn”resultsforTuesdaymorning.

Firewall Device Statistics (Weekly cPu utilization)ThisscreensummarizesCPUusage,foraweeklytimeframe.YourorganizationmayhavepaidparticularattentiontospikesinCPUutilizationthatoccurredoutsideoftraditionalhigh-volumebusinesshours.

Firewall Device Statistics (Denied Ports — Weekly View)Ourfinalscreen-shotsummarizesDeniedPorts(bytype),foraweeklytimeperiod.Ifthisgraphreflectedactualcustomeractivity,theactivitythatoccurredonlateWednesdaywouldwarrantfurtherreviewbyyourorganization.



©2009Savvis,Inc.Allrightsreserved.Savvis®istheregisteredtrademarkofSavvisCommunicationsCorporation.Allothertrademarksandservicemarksarethepropertyoftheirrespectiveowners.-3-

About Savvis Savvis,Inc.(NASDAQ:SVVS)isanoutsourcingproviderofmanagedcomputingandnetworkinfrastructureforITapplications.ByoutsourcingtoSavvis,enterprisescanfocusontheircorebusinesswhileSavvisensuresthequalityoftheirITinfrastructure.LeadingITorganizationsaroundtheworldhaveselectedSavvistohelpthemimprovetheirservicelevels,reducecapitalexpenseanddealwiththerisingcostsofbandwidth,energy,realestate,staffandexpertise.Asapioneerinutilitycomputing,Savvisunderstandsandharnessesthelatestadvancesintechnologylikevirtualization,cloudcomputingandsupportprocessautomation.

For more informationabout Savvis, visitwww.savvis.net orcall 1.800.SAVViS.1(1.800.728.8471).

EMEASavvis UK Limited Tel +44 (0)118 322 6000

ASIA PAcIfIcSavvis Singapore company Pte Ltd Tel +65 6768 8000

JAPAnSavvis communications K.K. Tel +81.3.5214.0151

www.savvis.net