VeriSign's Managed Firewall and VPN services protect an organization's key information assets across networks, hosts, applications and databases. VeriSign's highly trained security experts become an extension of each customer's in-house IT staff, providing analysis, configuration, setup, alerts and 24x7 system management. The customized firewall services harness industry's best practices to ensure a high level of network access and information availability, integrity and privacy. Around-the-clock firewall monitoring generates immediate alerts and responses for service outages and security alerts associated with critical Internet access points.

Features and Benefits

The Managed Firewall and VPN Service includes the following:

		Powerful Event Correlation via TeraGuard TM – VeriSign's information management architecture, TeraGuard, takes a wide range of disparate data sources from security and network devices and converts the information into a single, normalized stream of security-related events. TeraGuard then analyzes and prioritizes these events using a multi-tiered correlation process. This enables VeriSign to quickly eliminate false positives, find real threats and take the appropriate action.
		Service Level Agreements (SLAs) – VeriSign offers Full Life-Cycle Management of its customers' firewalls with guaranteed SLAs.
		Full Life-Cycle Management – VeriSign delivers true life-cycle management of the firewall devices on an ongoing basis. This includes proactive refinement of security policies, software patches and upgrades as well as quarterly security consultations.
		More than 1,600 signatures in the database with a total capacity of 3,000 signatures
		Health and Performance Monitoring – 24x7 proactive monitoring for health and performance of the device. This allows VeriSign to proactively address developing operational problems prior to actual service failures.
		Unmatched Security Intelligence - VeriSign has unique visibility into Internet security threats, by managing critical Internet infrastructure services such as DNS.
		Guaranteed Responsiveness – VeriSign commences a client-specific escalation procedure the moment a problem is detected and then works quickly to identify its source.
		Reliable Communication/Management Channel – VeriSign's proprietary Security Defense Appliance TM (SDA) provides a secure, fault-tolerant communication and management channel. The SDA enables VeriSign to remotely monitor its customers' firewalls, install system and software updates and deploy innovative security technologies. The SDA, located behind a customer's firewall, provides secure, event store-and-forward capabilities via an encrypted connection to the Security Operations Centers (SOC). Deployment of the SDA is not required, but highly recommended.
		Always-On Client Resource Portal – The VeriSign Internet portal provides a detailed view of its clients' security devices that are under management. It includes a variety of reports per device type, and access to an ad hoc query engine for sophisticated analysis of security events across multiple platforms and locations. Access to the system is secured with token-based authentication and SSL encryption.
		24x7 Management, Monitoring, and Support – VeriSign's expert staff of security analysts are available to customers around-the-clock.
		Trained and Dedicated Professionals – VeriSign has an extensive team of certified security professionals who are specially trained to manage the VPNs of leading industry vendors.
		Lower Total Cost of Ownership – VeriSign's firewall management saves organizations time and money by reducing staffing, training and maintenance.

Upgrades

		High Availability – VeriSign's redundant firewall architecture options, which include automatic fail over and clustering approaches, can be added to mission critical environments to ensure continuity of network access and information availability.
		VPN Service Option – VeriSign delivers a highly secure and reliable industry standard VPN service with 24x7 management and monitoring support. This service meets the business needs of both site-to-site and remote user VPN access. The service includes industry standard authentication and encryption technologies to ensure the confidentiality, availability, and integrity of communications between sender and recipient.

Supported Platforms

		Check Point
		Cisco PIX
		NetScreen
		Secure Computing

Managed Security Services (MSS)

Other services which are part of the Managed Security Services are: