Managed Security

Distributed Denial of Service (DDoS) Mitigation

A Distributed Denial of Service attack is a form of attack where malicious users attempt to make network resources unavailable to intended users. Typical target sites include high profile, political, financial, gaming & on-line businesses.

 DDoS Service Description

 DDoS Service data sheet

Interoute's solution

1. Interoute’s DDoS Mitigation service learns the normal profile of site traffic within the Interoute core network.
2. The system alerts when abnormal traffic is detected.
3. The service can then “scrub” and filter traffic, discarding malicious traffic.
4. Legitimate traffic is allowed to pass.

Intrusion Prevention Systems (IPS)

Interoute intrusion prevention detects and blocks intrusion attempts, malicious code transmission and network based threats without impacting your networks performance. The solution is capable of supporting throughputs from 100Mbps through to 10Gbps as a standard solution.

The service operates transparently to the user and therefore it does not require any reconfiguration of the existing network to which it connects. The Interoute Network Intrusion Prevention service provides a complex protection layer for enterprises.  By using protocol recognition, identification, and traffic analysis the Interoute Intrusion Prevention Service can detect, identify, alert and protect your organisation from threats such as:

• Worms
• Spyware
• Peer to peer (P2P)
• Denial of service (DoS) and distributed denial of service (DDoS)
• Botnets
• Targeted attacks against Web applications
• Proprietary or sensitive data leaving the network
• Cross-site scripting
• SQL injection
• Buffer overflow
• Web directory traversal

 Network Intrusion Prevention Service Description

 Network Intrusion Prevention Service Datasheet

Next Generation Firewall Service

Interoute Next Generation Network Firewall Service enforces a specific policy to allow, block and detect traffic at the boundary to the Internet creating an internal secured zone. Two DMZ zones for Internet facing hosts and Corporate Wireless access are also reserved and external remote access is configured with software token authorisation at installation to provide a complete solution for all access needs.

The default configuration allows for outbound IPv4 NAT and native IPv6 access to the Internet.

Complete visibility and reporting of the network boundary provided by the firewall is available from real-time access  as well as monthly and ad-hoc reporting.

Deployment in line with an Interoute supplied Internet Service is the only supported solution as it achieves the highest degree of protection and manageability. The firewall has the following additional features:

SSL VPN

Provides wide device support for remote access further secured by software tokens

Web Application Visibility and Control

Visibility and Control for Web apps, Web 2.0

Next Generation Firewall Service Description (PDF)

Next Generation Firewall Datasheet (PDF)

Content Filtering

Electronic communications carry a host of threats that can harm efficiency, productivity and reputation. For instance, a single infected message or ‘bad’ web link could compromise an enterprises entire network. Threats are also becoming increasingly better targeted at businesses of all types and sizes. Symantec. cloud services are the most convenient and cost-effective way of reducing messaging and web-related risks. Because they are fully hosted, they help eliminate the need for you to keep investing in in-house expertise and infrastructure.

Every day, Symantec.cloud services block millions of threats. Deriving vital intelligence from these operations, their services function within the fabric of the Internet to maintain the integrity of all your electronic communications. Symantec.cloud skilled team of client service managers, engineers and support specialists ensure enterprises can exchange business information safely, seamlessly and without interruption. Moreover, the services are easy to set up and virtually maintenance-free.

Interoute in partnering with Symantec.cloud services intends to offer the best threat protection available to its customers. Symantec.clouds’ unique Skeptic™ technology uses proprietary heuristics that leverage grid computing power to process more than 6 billion emails and 1 billion web requests each day. Linking this knowledge with world-leading global infrastructure and unmatched ability to share data across email and web, will protect customers even as threats converge and grow in sophistication.

 Content Filtering Service Description

 Content Filtering datasheet

Managed 2 Factor Authentication

Interoute, using carefully selected third parties, supplies and supports Two-Factor Authentication (also known as 2FA) as either a complement for Roaming Access via IPsec or SSL as well as a standalone service for your own specific needs (for example, access to a web server, a cloud service, etc.)

Once implemented, the customer (via a nominated administrator) assumes control of the management and provisioning of its token inventory using the web portal.

The web portal allows the customer and their end users to perform basic operations with their tokens, such as token re-synchronisation and PIN change.

The web portal also show information regarding the status of the services.

Interoute 2FA service is supported by hardware or software tokens.

 Two-Factor Authentication datasheet

Security Consultancy Services

Interoute provides security consultancy services to our customers in review and support of our services. These security consultancy services are in addition to the standard charges for our services. The security consultancy services are provided by key selected partners. Each partner has been evaluated on the basis of their skills and capabilities in supporting Interoute customers.

The Standard Security Consultancy Services packages are available for:

Key Security partners