Security - Overview
Ultraspeed has carefully engineered its entire infrastructure with security in mind. The concept of security extends all the way from people and processes down to data security and across to physical security. Security is a key concern for Ultraspeed when both building customer environments, and designing our own infrastructure on which customer environments run. Customers can be confident of Ultraspeed's ability to deliver secure Managed Hosting solutions, no matter how sensitive the data is.
Firewalls
Ultraspeed offers a sophisticated and powerful managed firewall service based on its Juniper platform. High availability pairs of Juniper firewalls are arranged on a per rack basis and managed by our security specialists.
Each customer is provisioned in a separate security zone and virtual network, extended all the way down to the servers. This provides full separation from other customers and the reassurance of having a completely isolated, secure environment.
Ultraspeed firewalls are flow-aware, which allows them to observe the traffic in terms of sessions between end users and services run on the servers, instead of just random packets going in and out of the network. Intelligent inspection engines can differentiate between users visiting customer websites or the server making an API call to external XML data source, and apply appropriate security rules for both. Using this kind of technology customers can open web applications to the world, not having to worry about another cross-site scripting vulnerability discovered "just last night".
Ultraspeed strongly recommends that customers only access their environments using a Virtual Private Network (VPN). This can either be a single secure tunnel (using software) from a laptop or desktop, or a permanent site-to-site VPN, allowing many users to connect securely to a customer environment with Ultraspeed. This provides an extra layer of authentication before accessing critical servers, as well as military-grade encryption and privacy.
Anti-Virus
AVG Enterprise Anti-Virus software is deployed on appropriate customer environments, and updates are rolled out every 24 hours.
Network Security
Ultraspeed takes a number of steps within its core network to ensure it is secure, which includes using multiple vendors, administration via management network, encrypted passwords and much more.
We work with our upstream providers to assist customers in dealing with Denial of Service and Distributed Denial of Service attacks. We perform SYN detection and block source IPs, both within our core network and via its managed firewall platform.
Intrusion Prevention
Intrusion prevention and detection is carried out within Ultraspeed's managed firewall platform. For security purposes many of these details are confidential but we would be happy to explain more, if required.
