Managed Firewall and IDS/IPS

Managed Firewall and IPS/IDS is a service for clients that provides Firewall and IPS resources based on carrier-grade hardware solution for resources protection from various types of cyber threats. It allows to control and filter all network packages in accordance with the policies and options of Firewall/IPS that are set.
Find out more
Price list

Tech specs


Detection and protection from cyber threats. The following IDS/IPS functions are supported:

  • Compound attacks detection
  • Signature verification with status monitoring (to prevent false operation))
  • Detection of attacks and attempts to exploit known vulnerabilities based on more than 20.000 Statefull signatures
  • Signature search takes place inside protocols which reduces the number of false operations and increases productivity (more than 600 contexts)
  • Traffic normalization (prevents attempts to bypass IPS through obfuscation)
  • Protection against zero-day exploits (decodes protocol anomalies)
  • A variety of pre-configured policies for simple deployment
  • Protocol verification in compliance with RFC requirements
  • Decoding of over 60 protocols
  • Package capturing options (packages before, during and after the attack can be captured for further investigation)

Firewalling with flexible rule modifications

  • Allows or denies traffic between and within zones
  • Operates on session level: IP-src, IP-dst, Port-src, Port-dst, Protocol, Service, User, Zone
  • Monitors session status
  • Validates TCP session initiation, sequence number accordance, full TCP handshake validation, timeout tracking
  • Creates automatic dynamic reverse policies for reverse traffic

Juniper SRX-5600

Carrier-class hardware solution that consists of Juniper SRX-5600 platform cluster


Advantages

Simplicity and convenience

  • Quick hookup
  • Logical/virtual Firewall is used for each client connection
  • No need for long-term procurement and selection of hardware solutions
  • No need for hardware solution support

Cost-effectiveness

  • Transfer of costs to OPEX (lack of investment in expensive equipment, its modernization and further hardware support)
  • Flexible pricing based on aims like business growth and traffic volumes (quickly enlarge service capacity)

Reliability and guarantees

  • Reliable carrier-grade hardware solution
  • Located in Tier 3 Avantage Data Center
  • Highly qualified #CloudMTS specialists provide general Firewall/IPS administration including regular software upgrades without service interruptions

Infrastructure

Rates
Data center Avantage, internet access port speed limit, Mbit/sec Firewall Price*,
RUB/month
Firewall Price+IPS*,
RUB/month
100
2 500
4 500
150
3 675
6 615
200
4 800
8 640
250
5 875
10 575
300
6 900
12 420
500
11 250
20 250
700
14 875
26 775
1 000
20 000
36 000
1 500
26 250
47 250
2 000
32 500
58 500
3 000
45 000
81 000
4 000
55 000
99 000
5 000
62 500
112 500
10 000
100 000
180 000
*Monthly price-per-unit rates excluding VAT


Service options
  • Allocation of public
    IP addresses
  • Network/DMZ/servers protection from unauthorized access from the Internet
  • Access to manage Logical Firewall
  • Provision of Firewall resources in accordance with requested volume

Advantages

Simplicity and convenience

  • Quick hookup
  • Logical/virtual Firewall is used for each client connection
  • No need for long-term procurement and selection of hardware solutions
  • No need for hardware solution support

Cost-effectiveness

  • Transfer of costs to OPEX (lack of investment in expensive equipment, its modernization and further hardware support)
  • Flexible pricing based on aims like business growth and traffic volumes (quickly enlarge service capacity)

Reliability and guarantees

  • Reliable carrier-grade hardware solution
  • Located in Tier 3 Avantage Data Center
  • Highly qualified #CloudMTS specialists provide general Firewall/IPS administration including regular software upgrades without service interruptions
FAQ
?What functionality is the client responsible for when purchasing and using the service?
?Can I use Internet access from another provider?
?Where is Firewall located?