Managed Security Service

2

Common IT Security Challenges• Does my network security protect my IT environment and

sensitive data and meet the regulatory compliances?

• How do I keep my cloud based servers, IT assets and MPLS network protected from malicious intruders and malware?

• How do I get my limited IT staff refocused on strategic revenue generating initiatives?

• How can I lower or eliminate the CAPEX and OPEX of deploying and managing multiple firewall devices at all my locations?

3

Security & Compliance Issues Grow

Approximately 80 percent of small businesses that experience a data breach go bankrupt or suffer severe financial losses within two years of a security breach.- Small Business Computing Magazine

93% of companies that have lost their data center for 10 days or more have filed for bankruptcy within one year.- U.S. National Archives and Records Administration

Number of Breaches by Threat Type

Source: Verizon 2014 Data Breach Investigations Report

4

These Headlines Are All-Too-Common

5

Can You Afford the Risk?

• If your business is faced with data theft, what would you do?• What do you think the impact would be (tangible and intangible)?• How would your customers react?• How would your investors react?• What would your competitors do to capitalize on your

problem?• How long would it take for your business to recover?

?

6

Cost of Security Compromises

• $5.85M - average cost of data breach in US, growing 15% over last year (IBM/Ponemon Institute 2014)

– Average US lost business cost: $3.3M in customer turnover, increased customer acquisition activities, reputation losses and diminished goodwill

• $148M – cost of Target breach and ousted CEO (Forbes)

• 10 hours of unplanned downtime has potential cost from $125,000 for an SMB to as much as $17M for an enterprise firm (IDC)

How much can you afford to lose?$

7

How Managed Security Can Help

• Shift the burden of security management to EarthLink

• Provide an outsourced security solution with 24/7 monitoring, protection and support

• Reduce the amount of internal resources needed to manage network security and administration

Lower the time and cost of managing day-to-day IT operations, and free your IT budget and staff

to focus on strategic initiatives.

Empower your business•Lower upfront capital resources•Simplify IT management•Rapidly scale up and down

8

EarthLink Managed Security Solutions

• Managed Security provides a comprehensive suite of security services to manage and protect your network assets– Managed Firewall

• Managed Premises Firewall• Data Center Firewall

– Secure Remote Access– PCI Compliance Solutions

• PCI Protect• PCI Assist• PCI Certify

9

Managed Firewall

• Managed Premises Firewall• Data Center Firewall

– Designed for Hosted solutions, Colocation customers, or MPLS networks

Secure managed firewall to reduce Internet threats by stopping both inbound and outbound security threats. We lower cost and

ensure that your most valuable and confidential information stays secure.

10

Managed Firewall Features

  Managed Premises Firewall

Data Center Firewall

Features Available:Stateful inspection x xAntivirus and antispam x xIntrusion detection and protection x xURL and content filtering x OptionalCategory-based filtering x OptionalActive Directory integration OptionalApplication control x xUnlimited policy changes x xMonthly reporting x xSelf-serve portal xOn-demand reporting xConfiguration backup and restore x x24/7/365 device/availability monitoring x xPerformance and availability management x x

11

Managed Firewall Benefits

• Managed security solution – Provides Unified Threat Management (UTM) – Experts on staff to support your business– Proactively deploys latest security patches

• Protects against theft• Protects your key business information assets 24/7• Reduces need for security experts on staff• Eliminates maintenance and management of customer-owned

firewall• Improves network performance by blocking data from non-

approved sites, applications and content

12

Firewall Reports

• Self-serve portal available for on-demand reporting and changes • Examples of reports available:

– Basic Security Report– Bandwidth Analysis Report– Web Filtering Reports– Forensic Analysis Report– Threat Analysis Report

13

Managed Premises Firewall Options• Basic Option

– Policy Management– Backup/Restore– Performance Monitoring– Troubleshooting and Alerting– Unlimited Policy Changes per month

• Premium Option (Includes Basic Option plus)– URL Filtering– Web Content Filtering– Category-based filtering– Customized Content Filtering and Application Control– Intrusion Prevention (IPS)– Antivirus

14

Data Center Firewall

• Provides Unified Threat Management (UTM)• Security experts on EarthLink staff to support your business• Proactively deploys latest security patches• Reduces need for security experts on staff• Eliminates maintenance and management of customer-

owned firewall• Improves network performance by blocking data from non-

approved sites, applications and content

15

Data Center Firewall Features• Protection against data theft, unauthorized network access,

inappropriate web content, infected files and malware

• Safeguard your MPLS locations from the Internet

• Intrusion Prevention Service

• Antivirus/Malware/Spyware protection

• Application Control

• Log retention

• Complete security reporting

• 24x7 support

• Performance guarantees

• Web Content Filtering including Category and URL whitelisting/blacklist filtering (optional)

• Multiple web content profiles (optional)

• Active Directory integration (optional)

16

Secure Remote Access

• Provides remote access to your private network– Customers control adding or removing users– Restrict access based on security

Access method for mobile users, telecommuters, small offices, provided

as firewall feature or standalone.

17

Secure Remote Access Benefits

• Secure connectivity• Improve employee and business productivity

with instant access to network and information• Support for Windows, Mac, Linux, iPhone, iPad,

Android

18

What is PCI Compliance?

• Definition – Payment Card Industry Data Security Standard (PCI-DSS)

• Set up by Visa, MasterCard, American Express, Discover, and JCB to reduce the risk of credit card theft and transfer liability to merchants

• Requires mandatory adoption by allbusinesses that store, process, transmit credit/debit card data

6 Control

Objectives

12 Core

Requirements

250+ Audit

Procedures

19

Impact of a Breach on a Business

A credit card breach can take months to remediate

1. Must stop accepting credit cards2. Pay for forensic audit3. Pay fines and credit card replacement costs4. Pay to implement remediation actions and for future

on-site audits by a Qualified Security Assessor

The average U.S. business loses $3.3M per breach incident due to customer churn, brand damage, etc. (IBM and Ponemon Institute)

20

Secure Solutions for Merchants & Retailers

• SMB to Fortune 500 retail customers

• Tens of thousands of store locations

• Comprehensive network and IT services to support PCI compliance:– Nationwide private MPLS

– Direct Connect

• Secure Point of Sale connectivity

– SSAE 16 compliant data centers; connect directly via MPLS

– Managed security services

– PCI Compliance Validation with Breach Protection

21

Managed Security Services Benefits

Peace of Mind– Minimize risk and protect your business’ mission-critical information

Save Money– Lower operational costs and upfront capital expense associated with

managing, monitoring and securing your infrastructure

Make Your Life Easier– Comply with government and industry regulations through proactive

security monitoring, documented security policies and procedures

Save Time– Shift the burden of security management to EarthLink– On-demand reporting provides easy access and visibility to your critical

business assets

22

Why EarthLink?• Security experts to help you mitigate risks, achieve and

maintain industry compliance requirements while driving down the total cost of securing and managing your IT systems

• Private MPLS infrastructure and nationwide footprint• Advanced Data Center Firewall protects both your cloud

services and MPLS network from inbound and outbound threats

• Personalized support from EathLink’s IT consultants - an extension of your IT staff

• Online portal will consistently monitor your network and automatically open trouble tickets