Managed Security Service

2 Common IT Security Challenges Does my network security protect my IT environment and sensitive data and meet the regulatory compliances? How do I keep my cloud based servers, IT assets and MPLS network protected from malicious intruders and malware? How do I get my limited IT staff refocused on strategic revenue generating initiatives? How can I lower or eliminate the CAPEX and OPEX of deploying and managing multiple firewall devices at all my locations?

3 Security & Compliance Issues Grow Approximately 80 percent of small businesses that experience a data breach go bankrupt or suffer severe financial losses within two years of a security breach. - Small Business Computing Magazine 93% of companies that have lost their data center for 10 days or more have filed for bankruptcy within one year. - U.S. National Archives and Records Administration Number of Breaches by Threat Type Source: Verizon 2014 Data Breach Investigations Report

4 These Headlines Are All-Too-Common December 2013: Target hacked for info on more than 100M customers (NY Times) January 2014: Michaels Stores loses data on 100M customers (NY Times) April 2014: Heartbleed vulnerability in Open SSL publicly disclosed; left more than 2M servers vulnerable to unencrypted data leaks (IBM X-Force Threat Intelligence Quarterly 2014) September 2014: Home Depot announces data breach; 54M credit cards were breached (Krebs Onsecurity blog) September 2014: Apple iCloud accounts hacked for celebrity photos (CNN)

5 Can You Afford the Risk? If your business is faced with data theft, what would you do? What do you think the impact would be (tangible and intangible)? How would your customers react? How would your investors react? What would your competitors do to capitalize on your problem? How long would it take for your business to recover? ? ?

6 Cost of Security Compromises $5.85M - average cost of data breach in US, growing 15% over last year (IBM/Ponemon Institute 2014) – Average US lost business cost: $3.3M in customer turnover, increased customer acquisition activities, reputation losses and diminished goodwill $148M – cost of Target breach and ousted CEO (Forbes) 10 hours of unplanned downtime has potential cost from $125,000 for an SMB to as much as $17M for an enterprise firm (IDC) How much can you afford to lose? $ $

7 How Managed Security Can Help Shift the burden of security management to EarthLink Provide an outsourced security solution with 24/7 monitoring, protection and support Reduce the amount of internal resources needed to manage network security and administration Lower the time and cost of managing day-to-day IT operations, and free your IT budget and staff to focus on strategic initiatives. Empower your business Lower upfront capital resources Simplify IT management Rapidly scale up and down Empower your business Lower upfront capital resources Simplify IT management Rapidly scale up and down

8 EarthLink Managed Security Solutions Managed Security provides a comprehensive suite of security services to manage and protect your network assets – Managed Firewall Managed Premises Firewall Data Center Firewall – Secure Remote Access – PCI Compliance Solutions PCI Protect PCI Assist PCI Certify

9 Managed Firewall Managed Premises Firewall Data Center Firewall – Designed for Hosted solutions, Colocation customers, or MPLS networks Secure managed firewall to reduce Internet threats by stopping both inbound and outbound security threats. We lower cost and ensure that your most valuable and confidential information stays secure.

10 Managed Firewall Features Managed Premises Firewall Data Center Firewall Features Available: Stateful inspection xx Antivirus and antispam xx Intrusion detection and protection xx URL and content filtering xOptional Category-based filtering xOptional Active Directory integration Optional Application control xx Unlimited policy changes xx Monthly reporting xx Self-serve portal x On-demand reporting x Configuration backup and restore xx 24/7/365 device/availability monitoring xx Performance and availability management xx

11 Managed Firewall Benefits Managed security solution – Provides Unified Threat Management (UTM) – Experts on staff to support your business – Proactively deploys latest security patches Protects against theft Protects your key business information assets 24/7 Reduces need for security experts on staff Eliminates maintenance and management of customer-owned firewall Improves network performance by blocking data from non- approved sites, applications and content

12 Firewall Reports Self-serve portal available for on-demand reporting and changes Examples of reports available: – Basic Security Report – Bandwidth Analysis Report – Web Filtering Reports – Forensic Analysis Report – Threat Analysis Report

13 Managed Premises Firewall Options Basic Option – Policy Management – Backup/Restore – Performance Monitoring – Troubleshooting and Alerting – Unlimited Policy Changes per month Premium Option (Includes Basic Option plus) – URL Filtering – Web Content Filtering – Category-based filtering – Customized Content Filtering and Application Control – Intrusion Prevention (IPS) – Antivirus

14 Data Center Firewall Provides Unified Threat Management (UTM) Security experts on EarthLink staff to support your business Proactively deploys latest security patches Reduces need for security experts on staff Eliminates maintenance and management of customer- owned firewall Improves network performance by blocking data from non- approved sites, applications and content

15 Data Center Firewall Features Protection against data theft, unauthorized network access, inappropriate web content, infected files and malware Safeguard your MPLS locations from the Internet Intrusion Prevention Service Antivirus/Malware/Spyware protection Application Control Log retention Complete security reporting 24x7 support Performance guarantees Web Content Filtering including Category and URL whitelisting/blacklist filtering (optional) Multiple web content profiles (optional) Active Directory integration (optional)

16 Secure Remote Access Provides remote access to your private network – Customers control adding or removing users – Restrict access based on security Access method for mobile users, telecommuters, small offices, provided as firewall feature or standalone.

17 Secure Remote Access Benefits Secure connectivity Improve employee and business productivity with instant access to network and information Support for Windows, Mac, Linux, iPhone, iPad, Android

18 What is PCI Compliance? Definition – Payment Card Industry Data Security Standard (PCI-DSS) Set up by Visa, MasterCard, American Express, Discover, and JCB to reduce the risk of credit card theft and transfer liability to merchants Requires mandatory adoption by all businesses that store, process, transmit credit/debit card data 6 Control Objectives 12 Core Requirements 250+ Audit Procedures

19 Impact of a Breach on a Business A credit card breach can take months to remediate 1.Must stop accepting credit cards 2.Pay for forensic audit 3.Pay fines and credit card replacement costs 4.Pay to implement remediation actions and for future on-site audits by a Qualified Security Assessor The average U.S. business loses $3.3M per breach incident due to customer churn, brand damage, etc. (IBM and Ponemon Institute)

20 Secure Solutions for Merchants & Retailers SMB to Fortune 500 retail customers Tens of thousands of store locations Comprehensive network and IT services to support PCI compliance: – Nationwide private MPLS – Direct Connect Secure Point of Sale connectivity – SSAE 16 compliant data centers; connect directly via MPLS – Managed security services – PCI Compliance Validation with Breach Protection

21 Managed Security Services Benefits Peace of Mind – Minimize risk and protect your business’ mission-critical information Save Money – Lower operational costs and upfront capital expense associated with managing, monitoring and securing your infrastructure Make Your Life Easier – Comply with government and industry regulations through proactive security monitoring, documented security policies and procedures Save Time – Shift the burden of security management to EarthLink – On-demand reporting provides easy access and visibility to your critical business assets

22 Why EarthLink? Security experts to help you mitigate risks, achieve and maintain industry compliance requirements while driving down the total cost of securing and managing your IT systems Private MPLS infrastructure and nationwide footprint Advanced Data Center Firewall protects both your cloud services and MPLS network from inbound and outbound threats Personalized support from EathLink’s IT consultants - an extension of your IT staff Online portal will consistently monitor your network and automatically open trouble tickets