Managed Security Service

2

Common IT Security Challenges

• Does my network security protect my IT environment and sensitive data and meet the regulatory compliances?

• How do I keep my cloud based servers, IT assets and MPLS network protected from malicious intruders and malware?

• How do I get my limited IT staff refocused on strategic revenue generating initiatives?

• How can I lower or eliminate the CAPEX and OPEX of deploying and managing multiple firewall devices at all my locations?

3

Security & Compliance Issues Grow

Approximately 80 percent of small businesses that experience a data breach go bankrupt or suffer severe financial losses within two years of a security breach.- Small Business Computing Magazine

93% of companies that have lost their data center for 10 days or more have filed for bankruptcy within one year.

- U.S. National Archives and Records Administration

Number of Breaches by Threat Type

Source: Verizon 2014 Data Breach Investigations Report

4

These Headlines Are All-Too-Common

December 2013: Target hacked for info on more than 100M customers (NY Times)

January 2014: Michaels Stores loses data on 100M customers (NY Times)

April 2014: Heartbleed vulnerability in Open SSL publicly disclosed; left more than 2M servers vulnerable to unencrypted data leaks (IBM X-Force Threat Intelligence Quarterly 2014)

September 2014: Home Depot announces data breach; 54M credit cards were breached (Krebs Onsecurity blog)

September 2014: Apple iCloud accounts hacked for celebrity photos (CNN)

5

Can You Afford the Risk?

• If your business is faced with data theft, what would you do?• What do you think the impact would be (tangible and intangible)?• How would your customers react?• How would your investors react?• What would your competitors do to capitalize on your

problem?• How long would it take for your business to recover?

?

6

Cost of Security Compromises

• $5.85M - average cost of data breach in US, growing 15% over last year (IBM/Ponemon Institute 2014)

– Average US lost business cost: $3.3M in customer turnover, increased customer acquisition activities, reputation losses and diminished goodwill

• $148M – cost of Target breach and ousted CEO (Forbes)

• 10 hours of unplanned downtime has potential cost from $125,000 for an SMB to as much as $17M for an enterprise firm (IDC)

How much can you afford to lose?$

7

How Managed Security Can Help

• Shift the burden of security management to EarthLink

• Provide an outsourced security solution with 24/7 monitoring, protection and support

• Reduce the amount of internal resources needed to manage network security and administration

Lower the time and cost of managing day-to-day IT operations, and free your IT budget and staff

to focus on strategic initiatives.

Empower your business• Lower upfront

capital resources

• Simplify IT management

• Rapidly scale up and down

8

EarthLink Managed Security Solutions

• Managed Security provides a comprehensive suite of security services to manage and protect your network assets– Managed Firewall

• Premises Firewall• Cloud Firewall

– Secure Remote Access– PCI Compliance Solutions

• PCI Protect• PCI Assist• PCI Certify

9

Managed Firewall

• Premises Firewall• Cloud Firewall

– Designed for Hosted solutions, Colocation customers, or MPLS networks

Secure managed firewall to reduce Internet threats by stopping

both inbound and outbound security threats. We lower cost and ensure that your most valuable and confidential

information stays secure.

10

Managed Firewall Features

 Premises Firewall Cloud Firewall

Features Available:

Stateful inspection x x

Antivirus and antispam x x

Intrusion detection and protection x x

URL and content filtering x Optional

Category-based filtering x Optional

Active Directory integration Optional

Application control x x

Unlimited policy changes x x

Monthly reporting x x

Self-serve portal x

On-demand reporting x

Configuration backup and restore x x

24/7/365 device/availability monitoring x x

Performance and availability management x x

11

Managed Firewall Benefits

• Managed security solution – Provides Unified Threat Management (UTM) – Experts on staff to support your business– Proactively deploys latest security patches

• Protects against theft• Protects your key business information assets 24/7• Reduces need for security experts on staff• Eliminates maintenance and management of customer-owned

firewall• Improves network performance by blocking data from non-

approved sites, applications and content

12

Firewall Reports

• Self-serve portal available for on-demand reporting and changes • Examples of reports available:

– Basic Security Report– Bandwidth Analysis Report– Web Filtering Reports– Forensic Analysis Report– Threat Analysis Report

13

Premises Firewall Options

• Basic Option– Policy Management– Backup/Restore– Performance Monitoring– Troubleshooting and Alerting– Unlimited Policy Changes per month

• Premium Option (Includes Basic Option plus)

– URL Filtering– Web Content Filtering– Category-based filtering– Customized Content Filtering and Application Control– Intrusion Prevention (IPS)– Antivirus

14

Cloud Firewall

• Provides Unified Threat Management (UTM)• Security experts on EarthLink staff to support your business• Proactively deploys latest security patches• Reduces need for security experts on staff• Eliminates maintenance and management of customer-

owned firewall• Improves network performance by blocking data from non-

approved sites, applications and content

15

Cloud Firewall Features• Protection against data theft, unauthorized network

access, inappropriate web content, infected files and malware

• Safeguard your MPLS locations from the Internet

• Intrusion Prevention Service

• Antivirus/Malware/Spyware protection

• Application Control

• Log retention

• Complete security reporting

• 24x7 support

• Performance guarantees

• Web Content Filtering including Category and URL whitelisting/blacklist filtering (optional)

• Multiple web content profiles (optional)

• Active Directory integration (optional)

16

Secure Remote Access

• Provides remote access to your private network– Customers control adding or removing users– Restrict access based on security

Access method for mobile users, telecommuters, small offices, provided

as firewall feature or standalone.

17

Secure Remote Access Benefits

• Secure connectivity• Improve employee and business productivity

with instant access to network and information• Support for Windows, Mac, Linux, iPhone, iPad,

Android

18

What is PCI Compliance?

• Definition – Payment Card Industry Data Security Standard (PCI-DSS)

• Set up by Visa, MasterCard, American Express, Discover, and JCB to reduce the risk of credit card theft and transfer liability to merchants

• Requires mandatory adoption by allbusinesses that store, process, transmit credit/debit card data

6 Control

Objectives

12 Core

Requirements

250+ Audit

Procedures

19

Impact of a Breach on a Business

A credit card breach can take months to remediate

1. Must stop accepting credit cards2. Pay for forensic audit3. Pay fines and credit card replacement costs4. Pay to implement remediation actions and for future

on-site audits by a Qualified Security Assessor

The average U.S. business loses $3.3M per breach incident due to customer churn, brand damage, etc. (IBM and Ponemon Institute)

20

Secure Solutions for Merchants & Retailers

• SMB to Fortune 500 retail customers

• Tens of thousands of store locations

• Comprehensive network and IT services to support PCI compliance:– Nationwide private MPLS

– Direct Connect

• Secure Point of Sale connectivity

– SSAE 16 compliant data centers; connect directly via MPLS

– Managed security services

– PCI Compliance Validation with Breach Protection

21

Managed Security Services Benefits

Peace of Mind– Minimize risk and protect your business’ mission-critical information

Save Money– Lower operational costs and upfront capital expense associated with

managing, monitoring and securing your infrastructure

Make Your Life Easier– Comply with government and industry regulations through proactive

security monitoring, documented security policies and procedures

Save Time– Shift the burden of security management to EarthLink– On-demand reporting provides easy access and visibility to your critical

business assets

22

Why EarthLink?• Security experts to help you mitigate risks, achieve and

maintain industry compliance requirements while driving down the total cost of securing and managing your IT systems

• Private MPLS infrastructure and nationwide footprint• Advanced Cloud Firewall protects both your cloud services

and MPLS network from inbound and outbound threats• Personalized support from EathLink’s IT consultants - an

extension of your IT staff • Online portal will consistently monitor your network and

automatically open trouble tickets