Copyright 2013 FairPoint Communications Network safety and security – Protecting your communications resources Karen Romano, Vice President, Government and Education Solutions; and Steve Buza, Sales Engineer; FairPoint Communications
Copyright 2013 FairPoint Communications Introduction 2 MAINE VERMONT NEW HAMPSHIRE Incumbent communications provider in ME, NH and VT $350M in ubiquitous, next- generation network in Maine Largest network in northern NE, over 16k fiber route miles Services include voice (IP and traditional), internet, data, managed services, datacenter Scalable, highly resilient data network with speeds up to 10G Approximately 1200 local employees 1,000 vehicles Over $360K in community and civic contributions $60M/yr local purchasing FairPoint Maine
Copyright 2013 FairPoint Communications Where does security start? 3 Understanding Common Concerns Threat Identification Vulnerability Assessment Mitigation Techniques
Copyright 2013 FairPoint Communications Concerns Data Network Security Voice Security Disaster Recovery Security and protection start with identifying threats and understanding your vulnerabilities in these main areas. 4 Understanding Common Concerns
Copyright 2013 FairPoint Communications Threats Data Network: Denial of Service (DoS) Hacking Virus Voice Network: Eavesdropping Toll/PBX Fraud Emergency Response Failure Disaster Recovery: Lack of Diversity and Redundancy Single Points of Failure Failover Capabilities 5 Threat Identification
Copyright 2013 FairPoint Communications Vulnerabilities 6 DataVoiceDisaster Recovery Private vs. Public networks Firewalls, Intrusion Detection/Prevention systems Operating Systems Shared Accounts Physical Security End-point protection DNS Private Branch Exchange (PBX) Security IP/Hosted PBX Security Voice system failover and overflow Emergency Response Single Points of Failure Redundancy Diversity Data Center Vulnerabilities Assessment
Copyright 2013 FairPoint Communications Data Network Security 7 Mitigation Techniques SANS ( Best Security Practices Network Security Policy Employee Training Security Certifications Administrative Access High-strength passwords Firewalls Anti-Virus/Anti- Malware End-Point Protection
Copyright 2013 FairPoint Communications Network Security Policy 8 Mitigation Techniques Preparation Acceptable Usage Policy Risk Assessment Prevention Approving Changes Network Monitoring Response Security Violations Restoration Review
Copyright 2013 FairPoint Communications Data Network Security 9 Mitigation Techniques Intrusion Detection Systems (IDS) Intrusion Prevention Systems (IPS) Network & Server Event Logging and Analysis Operating System Security Patches Network Segmentation Quarterly Device Reviews
Copyright 2013 FairPoint Communications Voice Security – PBX Fraud 10 Mitigation Techniques PBX Fraud Becoming increasingly common. Municipalities being targeted PBX Vulnerability Weak authentication and access control Relying solely on equipment for security Inadequate Virtual LAN segregation IP PBX & SIP transitioning Public Networks Mitigation Use high-strength passwords Use digital dial block Do not auto-transfer inbound callers Disable the remote call-out feature Disconnect remote maintenance line International Toll Block
Copyright 2013 FairPoint Communications Voice - Emergency Response 11 Mitigation Techniques Vulnerabilities Municipality has multiple buildings or a multi-floor building. Not all floors or buildings appear in the E911 database. E911 and CNAM (Caller ID) Database Accuracy Mitigation Private Switch Automatic Location (PS-ALI) Inexpensive, life-saving feature May be required by the Public Utilities Commission Provides emergency services with specific location information for telephones. Can specify even the room number, floor, and best building entrance to use.
Copyright 2013 FairPoint Communications Voice – IP Security / Failover 12 Mitigation Techniques SIP Trunks & Hosted PBX Services Vulnerability: Voice services are on IP Networks Mitigation: Session Border Controllers Private Network Security Policy Voice Failover Vulnerability: Voice Service Outage Mitigation: Automated Failover Planned Failover Custom Redirect
Copyright 2013 FairPoint Communications Single Points of Failure 13 Mitigation Techniques Mission Critical Servers Fault Tolerance Backup / Backup Rotation / Off-Site Storage Data Center and Server Replication Public & Private Network Diversity Geographically Diverse Facilities Diverse Entrances Alternate Serving Wire Centers
Copyright 2013 FairPoint Communications Geographic Diversity 14 Mitigation Techniques
Copyright 2013 FairPoint Communications Geographic Diversity 15 Mitigation Techniques
Copyright 2013 FairPoint Communications Diversity w/ ASWC 16 Mitigation Techniques
Copyright 2013 FairPoint Communications Diversity with Data Center 17 Mitigation Techniques
Copyright 2013 FairPoint Communications Your Service Provider 18 How your service provider can help: Managed Network Services Alleviate IT staff from router management burden Pro-Active Troubleshooting, Ticketing, and Monitoring Management Portal (Router Health, Utilization) Intrusion Detection and Prevention (IDS/IPS) IOS Upgrades and Patches Private Wide Area Network (WAN) Private, Secure Improved performance and scalability vs. VPN Redundant and Resilient Network Designs for Voice & Data Service Provider
Copyright 2013 FairPoint Communications Your Service Provider 19 PRI Service with PS-ALI Inexpensive and Life Saving Feature that identifies the specific location of the caller to Emergency Services. SIP Trunking & Hosted PBX Secure, Private Network Reduced Capital Expenditures Consolidation of Telephone Services Data Center Cost Effective Scalable Secure Highly Reliable Service Provider
Copyright 2013 FairPoint Communications Questions 20 Thank You!
Copyright 2013 FairPoint Communications Your FairPoint Contacts Karen Romano, V-P Government and Education Beth McCarthy, Senior Account Manager Carl Richardson, Sales Engineer