Network Security

When it comes to securing your network, point products aren't the most efficient or the most robust option. For intelligent, comprehensive enterprise-level detection for all network-connected devices, organizations can rely on PCI's Network Security Platform combined with trusted Cisco and award-winning McAfee IDS/IPS and Fortinet Unified Threat Management systems. Furthermore, this solution incorporates industry tested products with an experienced security event team for optimal network event identification and remediation.

Key Advantages:

Broad threat prevention:

PCI's Network Security Platform protects infrastructure and endpoints from zero-day, DoS, encrypted, and SYN flood attacks, plus spyware, bonnets, malware, Voice over IP (VoIP) vulnerabilities, phishing, worms, Trojans, and peer to peer tunneling vulnerabilities.

Out-of-the-box default blocking:

PCI employs a "Default Recommended for Blocking" policy based on SANs and DoD best practices, which provides proactive blocking for hundreds of attacks.

Risk-aware intrusion prevention:

Prioritized risk management blocks the most relevant threats and attacks on your network based on your site-specific traffic profile and over 3,000 current multitrigger signatures with stateful traffic inspection.

Diverse Support Team:

Current certifications held by PCI's Network Security Team

• Global Information Assurance (GIAC)
• Certified Information Systems Security Professional (CISSP)
• Cisco Certified Security Professional (CCSP)
• NSA certifications for security oversight of Mission-critical networks (4011)
• NSA certifications for administration of National Security Systems (4013)

PCI's Intrusion Detection System (IDS) Network Security Platform:

Bronze Level IDS Package:

Address your evolving security and network needs with affordable business-class performance and reliability. The Proactive Network Security Platform allows high-performance monitoring of all customer locations from the service provider's core to customer branch offices. This reduces customer costs by eliminating the need to employ trained security personnel to manage sensors across multiple locations. The Proactive Network Security Team, utilizing Intrushield technology, takes advantage of economies of scale allowing service provider security personnel to operate on behalf of its business customers providing a cost effective alternative over the standard managed services model.

Sensors at the core network aggregation points and a one size fits all approach allows multiple customer traffic streams to be managed and monitored. There is no need for additional customer hardware or personnel because of the unique architecture made possible through a common media termination point. Detailed packet analysis occurs at wire speed with no degradation of service.

Bronze Level IDS Provided Reports:

PCI's IDS offering will provide comprehensive bi-monthly activity reports which include statistics on protocol anomalies, statistical anomalies, and signature detection to provide maximum detection against network reconnaissance, botnet, and distributed denial of service attacks. The reports allow management and technical staff to understand what is occurring on their networks and arms them with the necessary data to make intelligent decisions on an overarching corporate network security posture.

PCI's Intrusion Protection System (IPS) Network Security Platform:

Protect your enterprise and improve accuracy through use of multiple advanced detection methods, including signature, application, protocol anomaly, shell-code detection algorithms, and next-generation denial of service (DoS), and distributed denial of service (DDoS) prevention. Parse over 100 protocols and review over 3,000 high-quality, multi-token, multi-trigger signatures with stateful traffic inspection. Receive continuous threat updates 24/7 from the global research team at McAfee Avert Labs.

Silver Level IPS Package:

Signatures, anomalies, DoS and DDoS information to accurately block attacks before they reach their intended targets are tailored to block the current publish list of known high risk vulnerabilities. A level of protection far beyond the abilities of standard firewalls provides a defense against the top security risk factors as identified by:

• SANs Institute
• Department of Homeland Security (DHS)
• Computer Emergency Response Team (CERT)
• National Infrastructure Security Coordination Centre (NISCC, UK)
• Computer Emergency Response Team, Canada

The system provides protection of all network-connected devices with a combination of IPS, dynamic threat and vulnerability updates, and internal firewalls that provide multiple layers of security for integrated protection for current and future threats. By utilizing a one-policy fits all approach customers can benefit from real-time IPS protection at a more affordable price because of economies of scale. The result is affordable, real-time, actionable security.

Silver Level IPS Reports:

PCI's IPS offering will provide comprehensive bi-monthly activity reports which include statistics on protocol anomalies, statistical anomalies, and signature detections to provide maximum protection against network reconnaissance, botnet, and distributed denial of service attacks. The IPS service takes the guesswork out of network security. Detailed traffic analysis is conducted by certified personnel against identified traffic and attack patterns to create a metric for actual network attacks helping to reduce the number of false positives.

Gold Level IPS Package:

The IPS Gold service provides the added benefits of additional network protection, bandwidth savings, and increased levels of identification by targeting medium and low risk network attacks. This is accomplished through allowing sensors to communicate in a learning mode for customer location specific discovery of network traffic patterns. Through virtualizing each customer's network specific traffic with VLAN802.1q tags or Classless Inter-Domain Routing (CIDR) blocks at the Point-of-Presence (POP), Proactive can tailor customized policies to specific customer needs and adjust these policies on a regular basis.

Gold Level IPS Reports:

Gold level IPS subscribers get additional bi-monthly reporting that includes policy modification recommendations and adjustments based on unique site specific traffic. Traffic is targeted at not only network specific attacks but nuisance traffic like spyware and viruses that eat up network bandwidth unnecessarily. Based on the increased level of provider and customer interaction, network policies can be more closely tailor to network site specific needs. This, combined with immediate alerts against high impact attacks, provides up to the minute protection to remediate network security posturing.