Managed Security

Threat Intelligence Service

Threat intelligence helps organisations take a proactive stance on security to try and stay ahead of the game.

Challenges

Hackers are trawling the web 24/7x365, hunting for vulnerabilities and looking for their next target. Using automated tools to find information on the internet, hacker groups plot attacks and then execute them accordingly. The methods of attack vary considerably, from a well-crafted mass e-mail to a specifically targeted spear phishing attack. The threats are broad, and the scope of attack can target anyone for any reason. Threat intelligence can find the threats before they attack, to ensure organisations are prepared for the inevitable.

Service Capabilities

Our Threat Intelligence service will actively monitor customer domains for any mentions on dark web forums and look for existing typo squatting domains that are deliberately created to lure unsuspecting users who misspell domains.
Our platform is built for enterprises large and small; we have the resources and capabilities to consume data from all over the world and provide the customer with the intel to help protect their brand.
The primary purpose of this type of security is to keep organisations informed of the risks of advanced persistent threats, zero-day threats and exploits, and how to protect against them.

This will ensure the customer can stay up to date with the overwhelming volume of threats, including methods, vulnerabilities, targets and bad actors.
It helps the business become more proactive about future cyber security threats.
Vulnerability and extended manual testing will explicitly identify where security holes lie and remove false positives. When applicable, their methods will be utilised.

Target

Why Exponential-e

We can digest and translate the information into readable reports with both IT teams and board members benefitting from our expertise.
We can help the customer to stay ahead of the game by helping to devise a strategy to avoid potential attacks, protecting their data, brand and customers.

Managed Secure Network

Get in touch

Exponential-e’s Managed Secure Network combines the latest SD-WAN technologies to improve network performance, application visibility and control with the most advanced cyber security protection for the business.

Challenges

With the growth in technology, many networks are not configured to handle security and reliability requirements. To achieve business goals companies, need an agile and resilient wide area network to securely connect any service, any application and any employee or partner, regardless of location.

Service Capabilities

SD-WAN provides a secure unified connectivity service over any transport technology, providing centralised management and operations, with full control and visibility of application performance.
SD-WAN uses a centralised control function to securely and intelligently direct traffic across the WAN.
SD-WAN securely connects users to any application, whether hosted in the data centre or in the Cloud.
A single pane of glass to seamlessly manage and control network policies across enterprise branch locations.
It ensures secure access to websites and Cloud applications from remote branches.
Our SD-WAN branch devices have a stateful Firewall built into the device to provide security functions.
To complement our SD-WAN, a Secure Web Gateway can be added in the form of a next-generation Firewall, located in the Cloud. Its capabilities include Threat Prevention, URL Filtering and Full Deep Packet Inspection.

The Secure Web Gateway is designed to prevent cyber-attacks, whilst fully inspecting all application traffic.
It can be connected to regional offices and datacentres over a standard IPSec VPN tunnel directly to our SD-WAN edge devices.
Through the installation of an application on user endpoints, remote workers can have secure connectivity to the Gateway.
The solution uses a single pan of glass model for the centralised management platform, with addition Multi-Factor Authentication for added security.
Automated centralised logs are also collected via the Cortex Data Lake, to produce reports. These reports can be forwarded over to Syslog servers or to the SIEM system in order to get more detailed information from our in-house CSOC. Additionally, Best Practice Assessments (BPA) and Security Lifecycle Reports (SLR) can be produced from the Data Lake.

Target

Why Exponential-e

Our SD-WAN service has a zero-trust approach to network security and access management, with policy-based access to data at all times.
Our highly-qualified staff are able to design and implement next-generation solutions.
Exponential-e are a highly accredited IT service provider, with a deep understanding of compliance challenges.
Additional support from Exponential-e’s own Cyber Security Operations Centre (CSOC) available, if required.

Intrusion Prevention Service

Get in touch

Our Intrusion Prevention Systems (IPS) solution offers proactive prevention against some of today’s most notorious network exploits. When deployed correctly, an IPS prevents severe damage from being caused by malicious or unwanted packets and brute force attacks.

Challenges

IPS technology is becoming an increasingly global part of network security defences. Zero-day, advanced targeted attacks, ransomware, polymorphic malware and distributed denial-of-service attacks all require sophisticated detection engines not available in traditional standalone IPS or in most Firewalls.

Service Capabilities

An intrusion prevention system (IPS) is a form of network security that works to detect and prevent identified threats. Intrusion prevention systems continuously monitor the network, looking for possible malicious incidents and capturing information about them.
The IPS reports these events to system administrators and takes preventative action, such as closing access points and configuring firewalls to prevent future attacks.
Our Intrusion Prevention Service examines and inspects network traffic flows to identify potential threats and stop exploit attempts in real time.
We ensure customers are safe from known and unknown malware and exploit code threats. We control potential threats in a safe environment (sandboxing). To do this, we extract files from the data stream if the threat policy allows it, and we send them to a caged operating system image platform.

This function supports all the most extensively used operating systems – where we replicate how files would have been used on the endpoint. We monitor everything a potential threat does, for example whether it makes dependency calls to external files or Internet resources, or if it tries to retrieve other malware or exploit code.
When a threat has been identified, a new signature is generated and pushed back to the data path of the TPC™, where further mitigation is carried out. This all happens in real-time.
We use advanced static and dynamic analysis of potential threats.
Looking at the state of memory prior to, during and after a threat has been executed reveals potentially large spray-based attacks that seek to exploit possible vulnerabilities on the endpoint.
Intrusion Prevention offers seamless integration with other modules irrespective of deployment type.
IPS receives new policy rules and signatures every two hours, so the customer’s security is always up to date.

Target

Why Exponential-e

Managed IPS includes all support, maintenance, configuration and software patching and upgrades.
Seamless migration and fully supported journey from initial scoping to delivery and ongoing support., including nominated Solutions Engineers who are certified with the vendors, Provisioning Coordinators and a 24/7 Service Desk, backed by our stringent SLA’s.

Distributed Denial of Service

Get in touch

Our DDoS Mitigation service is there to ensure that a customer’s data and infrastructure is protected at all times.

Challenges

Year on year, the number of DDoS attacks doubles. With the internet becoming more vital for every business, especially those in eCommerce and social networking, threats are growing. IT security is therefore becoming more crucial, as over half of security incidents are the result of DDoS attacks.

Service Capabilities

There are four levels of DDoS:

Standard – This service is included with our inert services, and offers auto blackholing.
Primary – This service does auto network scrubbing for two managed assets.
Advanced – This is enterprise-grade DDoS.
Emergency – This option is available to all customers who experience a DDoS attack.

Our DDoS mitigation service includes “always-on automated monitoring”.
Customers will have real time visibility of their internet traffic, with details of the type and volume.
Reports that are automatically generated and can be instantly retrieved from the platform.
This service can also be tailored to business requirements, with different levels of protection for the critical network-facing assets.
Information is collected after a DDoS attack occurs, which gives intelligence in identifying any bad traffic. This means that the customer will have the benefit of protection from bad IP traffic from the start of their service.
Businesses will not need to change their existing Firewalls, policies or training.

Target

Why Exponential-e

Exponential-e are a highly accredited IT service provider, who have a deep understanding of the challenges necessary to achieve any company’s compliance requirement.
Exponential-e employs a number of experienced security inspectors, responsible for conducting our security audits.
This solution has been tested by market leaders and proven to be best of breed.

Managed Firewalls

Get in touch

Fully Managed Firewalls with UTM (Unified Threat Management) and NG (Next Generation) capability to protect a company’s corporate network from unauthorised access and other internet security threats.

Challenges

A Firewall is a network's first line of defence against external attacks, as well as any suspicious activity originating from within the network. Our Managed Firewalls can offer this level of protection. Legacy Firewalls may not have the capability to cope with advancing technology, such as Cloud and bandwidth-hungry applications, meaning that it may suffer and leave the customer vulnerable. With the increased use of online web applications, business need to ensure that web filtering and antivirus is enabled.

Service Capabilities

We have partnered with two leading vendors to create our four Firewall options.
Customers can choose from a Dedicated Firewall, Hosted at our data centre or Customer site, or our Centralised Firewall.
Our Managed Centralised Firewall is a cost-effective solution, offering basic firewalling that allows for VPN termination.
The Managed Centralised UTM Firewall option is a comprehensive Firewall solution, including all the main UTM features, such as anti-virus, application control and web filtering.
The Centralised solution is built using multiple high-availability resilient Firewalls working as an active-passive pair for failover purposes.
Dedicated Managed/Managed UTM Firewall is ideal for customers with very specific requirements, which doesn’t allow for the Centralised solution (i.e. the need for very CPU intense features like SSL, network configuration, singular maintenance windows).

A UTM license that gives the added benefit of anti-virus scans and application control, alongside web and IPS.
Security content updates for the UTM features are applied regularly and automatically, which means customers can receive regular reports with a summary of the traffic seen for further risk analysis.
Our Dedicated Managed NG Firewalls are similar to the NGUTM Firewalls. The NG Firewall offers all the latest security features, such as application visibility and control which is best for high throughput requirements.
We can combine both vendor's Firewalls to offer a fully managed dual-layer Firewall solution.
By choosing Firewalls hosted at our secure Tier III data centre, customers benefit from cost savings as customers do not have to purchase and maintain hardware at their own premises.

Target

Why Exponential-e

All maintenance, configuration, patching and upgrades. included.
Scalable and flexible, to grow with the needs of the business.
Seamless migration process and ongoing support, including certified Solutions Engineers.
Provisioning Coordinators and a 24/7 Service Desk, backed by robust SLA’s.
Upgrade to CSOC and CSOC Lite services for proactive monitoring.