Managed Security

1. Managed Security

2. Typical Business IT Security Challenges • Does my network security protect my IT environment and sensitive data and meet the regulatory compliances? • How do I protect all my locations and end-users from malicious intruders and malware? • How do I keep my cloud based servers and IT assets protected? • How do I ensure that content filtering and URL blocking policies are deployed on a uniform basis across multiple locations? • How can I lower or eliminate the CAPEX and lower the OPEX of my security deployments? • How can I ensure my remote and mobile employees are connecting securely to my private network? • How do I get my limited IT staff refocused on strategic revenue generating initiatives?

3. Security & Compliance are Mission Critical Cyber attacks have nearly tripled in the past year. “Approximately 80 percent of small businesses that experience a data breach go bankrupt or suffer severe financial losses within two years of a security breach” - Small Business Computing Magazine “2011 proved to be another tough year for companies attempting to defend sensitive information from cyber attack. Rate of personal records being compromised roughly tripled from 12 million in 2010 to 30 million in 2011.” – Privacy Rights Clearinghouse

4. Managed Security Shift the burden of security management to EarthLink Business Provide an outsourced security solution with 24/7 monitoring, protection and support Reduce the amount of internal human resources needed to manage network security and administration • Empower your business • Lower upfront capital resources • Simplify IT management • Rapidly scale up and down Lower the time and cost of managing day-to-day IT operations, and free your IT budget and staff to focus on strategic initiatives.

5. EarthLink Managed Security Solutions • Managed Security provides a comprehensive suite of security services to manage and protect your network assets • Managed Firewall • Hosted Network Security • Managed Premises Firewall • Data Center Firewall • Secure Remote Access • PCI Compliance Validation • Cloud Backup & Recovery Solutions • Cloud Disaster Recovery • Cloud Server Backup

6. Three options are provided for firewall services Hosted Network Security Designed for 6+ sites with MPLS Managed Premises Firewall Designed for 1+ sites Data Center Based Firewall Designed for Hosted Solutions or Colocation customers Managed Firewall Secure managed firewall to reduce Internet threats by stopping both inbound and outbound security threats. We lower cost and ensure that your most valuable and confidential information stays secure.

7. Managed Firewall Features

8. Managed security solution Provides Unified Threat Management (UTM) Experts on staff to support your business Proactively maintain latest security patches Protects against theft Protects your key business information assets 24/7 Reduces need for security experts on staff Eliminates maintenance and management of customer-owned firewall Improves network performance by blocking data from non-approved sites, applications and content Managed Firewall Benefits

9. Hosted Network Security, Data Center Firewall and Managed Premises Firewalls all offer reporting features Hosted Network Security has a self-serve portal for on-demand reporting and changes Examples of reports available: Basic Security Report Bandwidth Analysis Report Web Filtering Reports Forensic Analysis Report Threat Analysis Report Firewall Reports

10. Managed firewall based on customer premises Industry leading firewall devices from Fortinet: Managed Premises Firewall

11. Basic Option Policy Management Backup/Restore Performance Monitoring Troubleshooting and Alerting Unlimited Policy Changes per month Premium Option (Includes Basic Option plus) URL Filtering Web Content Filtering Category-based filtering Customized Content Filtering and Application Control Intrusion Detection (IDS) and Intrusion Prevention (IPS) Antivirus Managed Premises Firewall Options

12. Hosted Network Security provides firewall services via the EarthLink Business network Only available via EarthLink MPLS services of 6+ locations Redundant network architecture built on Fortinet FortiGate platform Atlanta, GA Sunnyvale, CA Hosted Network Security

13. Basic Option Firewall with stateful inspection NAT and PAT Advanced Option (Include Basic Option plus) URL filtering Web Content filtering Application Control Premium Option (Includes Advanced Option plus) Custom Content filtering Intrusion Detection (IDS) and Intrusion Prevention (IPS) Antivirus, Anti-Malware and Anti-Spyware Hosted Network Security Options

14. Protection against malicious threats, data theft and unauthorized access Unlimited standard configuration changes Complete security reporting Intrusion Prevention Service Config backup and restore Gateway Antivirus Application Control Performance guarantees Log retention 24x7 support Data Center Firewall

15. EarthLink multitenant firewall based in the EarthLink SSAE 16 SOC 2 data center Shared and dedicated options Firewall solution designed to protect hosted services in the data center Custom dedicated firewall solutions available Data Center Firewall

16. Provides remote access options to your network Customers control adding or removing users Restrict access based on security Secure Remote Access Access method for mobile users, telecommuters, small offices, provided as firewall feature or standalone.

17. Secure connectivity Improve employee productivity with network access while traveling Improve business productivity with instant access to network and information Support for Windows, Mac, Linux, iPhone, iPad, Android, Blackberry, Symbian & Windows Mobile Secure Remote Access Benefits

18. What is PCI Compliance? • Definition – Payment Card Industry Data Security Standard (PCI-DSS) • Set up by Visa, MasterCard, American Express, Discover, and JCB to reduce the risk of credit card theft and transfer liability to merchants • Requires mandatory adoption by allbusinesses that store, process, transmit credit/debit card data 6 Control Objectives 12 Core Requirements 6 Control Objectives 250+ Audit Procedures

19. Impact of a Breach on a Business Must stop taking credit cards Pay for forensic audit Pay fines and credit card replacement costs Pay to implement remediation actions and for future on-site audits by a Qualified Security Assessor A credit card breach can take months to remediate • The average business loses $3,007,015 per breach incident due to customer churn, brand damage, etc. (Symantec and Ponemon Institute)

20. EarthLink Business: Secure Solutions for Merchants & Retailers • SMB to Fortune 500 retail customers • Tens of thousands of store locations • Comprehensive network and IT services to support PCI compliance: • Nationwide private MPLS • Direct Connect • Secure Point of Sale connectivity • SSAE 16 compliant data centers; connect directly via MPLS • Managed security services • PCI Compliance Validation with Breach Protection

21. Operational Outages a Greater Threat • A regional disasters is only one type of event that impacts downtime • IDC Business Continuity Study • The greatest threats came from power outages, security, and telecommunications failures • Near majority had to initiate an application or data recovery in past 12 months • Only 10% had to activate a data center recovery • Only 6% experienced a facility loss. Source: IDC, The State of Business Continuity in End-User Environments in 2011, doc #227783; April, 2011"

22. EarthLink Cloud Server Backup • Protect your business’s mission-critical information assets. • Rapid recovery from man-made and Mother Nature’s disasters – server crashes, fires, hurricanes, tornados, ice storms, earthquakes. • Easy to use wizard to set your own backup schedules and priorities • Define your levels of backup – incremental, full system, real time, full hardware

23. Cloud Server Backup Take advantage of the Cloud • Eliminate the capital expense of purchasing new storage units • Reduce data center costs, no IT staff support requirements • Pay for only what you need, multiple standard options from 50 GB to 50 TB • Implement best practices for data retention and backup to satisfy compliance requirements Your data is secure in EarthLink Data Centers • SSAE 16 compliant data centers and certified security staff • Security monitoring 24/7 provides immediate remediation from viruses and malicious intruders

24. Cloud Server Backup • Features • Instantaneous on-line access to data – replicated on disks, not tape • Data remains intact and recoverable for disaster recovery protection • Daily email confirming that your data has been successfully backed up • Fully mirrored replication of your data across multiple SAN disks • Runs on Windows, Linux, Mac OS X and Unix • RAID 10 SAN Storage • 256-bit AES encryption for data at rest (in storage) • 128-bit SSL encryption for data in transit • SQL Backup • Initial seed loading with EarthLink provided external hard drive

25. An Affordable Solution Disaster recovery of your data, applications and operating systems. An affordable cloud based server that replicates your primary server environment and can be quickly scaled to fully replace your primary servers to get your business back up and running.

26. Cloud Disaster Recovery Take advantage of the Cloud • Disaster recovery protection of data, applications and operating systems • Continuous real-time replication • Supports multiple IT environments - physical and virtual servers • Minimal expense for replication server environment, no CAPEX • Pre-configure failover environment – only pay for full resources if needed • Geographic diversity in the event of a widespread disaster • Recovery from any outage though a single console Your data is secure in EarthLink Data Centers • SSAE 16 compliant data centers and certified security staff

27. Cloud Disaster Recovery Disaster recovery protection • Protection from man-made accidents, power outages, natural disasters, and server crashes • Failovers executed in less than 4 hours • Includes Platinum level of Managed Services • Provides customized email event notification • Flexible post recovery options: • Maintain the Cloud Hosted failover as new ongoing source platform • Reestablish on-site as new failover, backing up the new Cloud Hosted platform • Revert to original DR configuration – migrate data to new on-site servers, scale back Cloud Hosting to replication only

28. Managed SecurityServicesBenefits • Peace of Mind • Minimize risk and protect your business’s mission-critical information. • Save Money • Lower operational costs and upfront capital expense associated with managing, monitoring and securing your infrastructure. • Make your Life Easier • Comply with government and industry regulations though proactive security monitoring, documented security policies and procedures. • Save Time • Shift the burden of security management to EarthLink Business • On-demand reporting provides easy access and visibility to your critical business assets.

29. EarthLink Differentiators SSAE 16 SOC 2 Data Centers CISSP and CISA security experts to help you meet industry compliance requirements Advanced firewall features: Application Control, Antivirus/Malware/Spyware, Intrusion Detection System Private MPLS infrastructure and nationwide footprint IT consultants to help design your customized solution Personalized support - an extension of your IT staff Proven service provider across multiple industries