CyberGuard SG575 Manual do Utilizador descarregar pdf (Página 10)

Attack Prevention Services

Attack Prevention Services analyze attack readiness and provide recommendations for remediation.

Prevention services are available with every server hosted at The Planet and include:

C Ozone Access Control List Management

C Virtual Private Network Tunnels

C Vulnerability Assessments

C Penetration Testing

C Operating System Hardening

C Custom Cryptographic Services

Ozone Access Control List Management

Web servers must be accessible, which makes them vulnerable to attack. Firewalls can be used to

limit exposure to these servers, but they can still be overtaken by traffic directed at TCP and UDP

ports allowed through the firewalls. Networks and hosts are substantially more

secure with access control lists (ACLs) in place.

An ACL is a set of controls that filters out unwanted traffic and provides a logical, intuitive

mechanism for defining security policies. The Planet’s Ozone implements ACLs on virtual local area

networks (VLANs) protecting servers from exploits on unused TCP and UDP ports.

Ozone offers five environments for VLAN ACL protection:

C A Windows server environment (Windows 2000 and 2003)

C A Unix server environment (Redhat, FreeBDS, Debian)

C An OS neutral server environment (Windows 2000, Windows 2003, Redhat, FreeBDS,

Debian)

C A Game server environment (any OS) using templates designed by The Planet’s security

experts

C An Explicit Generic Deny Environment (any OS) that blocks well known vulnerable ports

A number of rule-based packet filters are available from which to choose within each environment

– one filter per VLAN is allowed. These filters are not designed to take the place of a true firewall,

and do not offer the same type of functionality of performance.

With Ozone:

C The Planet is providing a high-end security system to their clients that would be prohibitively

expensive to purchase and maintain on their own.

C The Planet Security Engineers are available to constantly review current threats on the

Internet and add or remove ports in danger

C Filters can be added or removed by the customer once an hour using The Planet’s proprietary

Web portal, ORBITK.

MC Software Security and Hosting

1 2 ... 5 6 7 8 9 10 11 12 13 14 15 ... 47 48

Sem comentários

CyberGuard SG575 Manual do Utilizador Página 10