Internet.comISP-Planet Home
ISP-Planet Survey: Managed Security Service Providers
( Back to Article)
Managed Firewall Services Chart
Managed Firewall Services
Platform(s)
24/7
Auto-
Response
Reports
& Logs
Policy
Updates
SLAs
Add-Ons
Comments
Alice Networks
Managed Firewall Service
 Cisco PIX
 Yes
Yes
 On Alice website
 or via email
 Via regular communication with
 client, best practices, and
 responding to known threats
Yes
 High-Availability
 VPN
Effective and reliable bi-directional communication with client, together with rapid escalation, is essential. All parties must understand their responsibilities and be able to act on them swiftly.

AT&T
Server Based (MFS-SB)
Router Based (MFS-RB)
Network Based (MFS-NB)

 Sun Ultra
 Cisco IOS
 SOCKS Proxy
 Yes
 Event  escalation
 per client's
 security policy
 FTP push or Log
 
Export API (LEA)
 to extract the logs
 in near real time
 Authorized individuals may request
 updates by SOC. Clients manage
 user-specific security policy and
 monitor other components
No
 High-Availability
 VPN
 IDS
 
Content Filtering
 Tunneling Service
IP network consultants & sales team work with clients to recommend appropriate solution based on requirements. Requires connectivity with AT&T to ensure service continuity & timely problem resolution.
Exodus
Managed Firewall Services and
Firewall Care Services
 Cisco PIX
 Check Point FW-1
 Nokia IP
 Yes
Yes
 Secure Web
  interface
 Remotely, at
 client's request
 Rsp.
 Time
 High-Availability
 Site-to-Site VPN
Two ownership options: Managed Firewall includes hardware and software rental; Firewall Care covers complete management of client-supplied Nokia firewalls. Both programs include on-site spares.
Genuity
Site Patrol for FW-1 Managed
Site Patrol for FW-1 Shared
 Check Point FW-1
 Yes
Yes
 Monthly incident
 summaries,
 Periodic security
 advisories
 Service available as fully
 Managed or Shared
Yes
 High-Availability
 Cascading
Guardent
Managed Firewall Services
 NetScreen
 Cisco PIX
 Check Point Nokia

 Compaq
Yes
Yes
 Secure Web
  portal
 Remotely from SNOC,
  at client request
Yes
 High-Availability
 VPN
 Anti-Virus
 
Content Filtering
Interland
Managed Firewall Services (by ISS)
 Nokia with
 Check Point SW
Yes
Yes
 Customer security  portal
 Contact 24/7 support
Yes
 High-Availability
 VPN
 IDS
"Powered by ISS:" Equipment at Interland remotely monitored by ISS
Intermedia Secure
Managed Firewall & VPN Services
 Check Point Nokia
Yes
Yes
 Daily Archiving with
  Monthly or Quarterly
  Reports
 Requests via telephone, email
 or Security Portal
Yes,
Buy not normal
 High-Availability
 VPN
 IDS
 Anti-Virus
 
Content Filtering
VPN included with Managed Firewalls.
Check Point OPSEC partner. Quarterly Vulnerability tests. On-site installation and network integration. Secure facility (camera/card access) with backup power and isolated network.
ISS
Enterprise Managed Firewall
Silver Managed Firewall
Small Office Managed Firewall
High-Availability Managed Firewall
 Check Point FW-1
 on Nokia or Sun
 WatchGuard

 Cisco PIX
Yes
       Yes
Details depend on service level
 Customer web portal
  provides secure
  access to log, policy
  and summarized
  reports
 ISS uses firewall and custom
 tools to make remote changes
 safely
Vary
per FW service
 High-Availability
 VPN
 IDS
 Anti-Virus
 
Content Filtering
 Help Desk
Enterprise & High Availability Services Proactive Monitoring with SLA on responding to network/CEP outages. Silver & Small Office Services; Health Monitoring tracks CPE status. Key SLAs are responsiveness to change requests and recognizing outages.
KeyBridge
Managed Firewall Service
 NetScreen
Yes
Determined per incident - not automated
 Planned as future
  enhancement
 Remotely, at client request
Yes
 High-Availability
 VPN
 IDS
Firewall and VPN use same box at no additional charge. Proactive monitoring for all devices. Management uses VPN for highest security. Monthly audits keep appliance HW and SW current.
METASeS
DefenseOne Firewall Monitoring & Mgmnt.
 Symantec Raptor
 Check Point VPN-1

 Cisco PIX

 NetScreen
Yes
Yes
 Via email, web
 Web request
Yes
 High-Availability
 Out of Band
 VPN
 IDS
NetPlexus
Managed Firewall Solution
 Check Point FW-1
 on Nokia
 SonicWALL
  Determined by client with consultation
 Secure web page
  provides reports and
  deployment
  documentation
 Requested via email, telephone,
  or personal NetPlexus Support
  web site
Yes
 High-Availability
 VPN
 IDS
 Anti-Virus
 
Content Filtering
Web site provides reporting tools and repository for deployment information, configurations, policy tables, network diagrams, and change requests. Lets customer submit and track support tickets. Data retained up to 6 months.
OneSecure
Managed Firewall Services
 Check Point
 NetScreen
 Cisco

 Nokia
Yes
Yes
 Current security
  policies, logs, alarms,
  and reports via web
  interface
 Shared visibility and control
  provided by patent-pending
  Co-Management System
  and SOC
Yes
 High-Availability
 VPN
 IDS
 Anti-Virus
 
Content Filtering
 Vulner. Assess.
Automation techniques allow OneSecure to install, maintain, monitor and update systems through the co-management system. Shared visibility facilitates customer service.
Riptech
Managed & Monitored Firewall Service
 Check Point VPN-1
  and Provider-1 on
 Nokia, Sun, Win
 Cisco PIX
 NetScreen

 Symantec Raptor
 WatchGuard
Yes
Yes
 Security logs and
  reports via secure
  Internet   interface
 Changes requested via secure
  Internet interface; changes made
  by Riptech engineers via VPN
  tunnel.
Yes
 High-Availability
 VPN
 IDS
 Monitor Only
Devices monitored and managed via Riptech's Caltarian platform, using advanced technology to identify real security threats amid large volumes of data. Detailed analysis and recommendations provided by SOC.
Symantec
Managed Firewall Services
 Symantec (Raptor)
 Cisco PIX
 Check Point FW-1
 Check Point-Nokia
 WatchGuard
 NetScreen
 NAI Gauntlet
 Sidewinder
Yes
Yes
 Reports available
  on a secured
  web site.
 Policies are
  remotely updated
 Cust
  Perf-
  Base
  SLA
 High-Availability
 Loadbalancing
 
VPN
 IDS
 Content Filtering
 Policy Compliance
Symantec assigns security analysts, by name, to all managed security services clients to provide its customers with professional continuity and a high level of personalized service. Several retainer-based consulting packages are available.
Telenisus
Managed Firewall Services
 Nokia
 Sun
 Intrusion.com
 Check Point
 Stonebeat
Yes
Yes
 Client Portal for
  trouble notification
  & tracking
 Updates requested by validated
  contact; designed, tested and
  implemented by certified staff.
Yes
 High-Availability
 VPN
 IDS
 Monitor Only
 Managed Auth.
Delivered as a single enforcement point, High Availability or Secure VPN, based on customer's needs. Performance reports and read only log access available at no additional charge. 99% of trouble cases are opened by Telenisus automated proactive monitoring systems.
Verio
Intellisecurity Firewall Services
 Check Point-Nokia
 NetScreen
Yes
for CP
Yes
Using Riptech Caltarian
 Logs, responses,
  prioritization, and
  recommended
  action via VPN-
  secured web
  interface. For
  critical or
  emergency event,
  customer is
  called.
 Updates requested by customers
  directly through the secure web
  interface.
Yes
 High-Availability
  VPN
Advanced analysis and event correlation combined with live security analysts quickly weed out false-positives and provide immediate escalation of serious events. Secure web interface also shows trouble ticket status, policy changes, date implemented, and activity reports.
WorldCom
Internet Managed Firewalls Check Point
IP Managed Firewalls WatchGuard
 Check Point
 WatchGuard
Yes
Yes
 Via secure web
  interface
 By customer request
Yes
 High-Availability
 Cold & Hot Spares
 VPN
 Content Filtering
Check Point service permits customer access to Admin GUI, letting customer manage individual users in real time. Includes one third-party independent security scan per year.
XO Communications
Managed Firewall Service
Nokia with
Check Point FW-1
Yes
No
 Available online
  via WebTrends
 Customer contacts Managed
 Security Support engineers
Std. XO
DIA SLA
 VPN
Customer's DIA circuit must be through XO. Check Point Certified engineers. Includes onsite installation, 24/7 management and monitoring, free policy changes, and reports viewed at any time.
 

 

Feedback


Advertising inquiry? Click here!

ISP-Planet's RSS feed