Web/E-business /

Verio, Exodus beef up respective security services

By Jennifer Mears
Network World, 05/07/01

ENGLEWOOD, COLO. - Web hosting companies Verio and Exodus have rolled out new managed security services in an effort to quell the fears of businesses reluctant to outsource because of possible network breaches.

Exodus is adding managed extranet and other services to its core security offerings, while Verio is making its first foray into "serious" security products, observers say.

Verio, which primarily offered shared hosting, has turned its focus to larger enterprise customers since its merger with Tokyo-based NTT Communications late last year, and managed security is one of a range of advanced services companies can expect from Verio, a spokeswoman says.

Verio is partnering with Riptech to offer its Intellisecurity service, which includes real-time, live analysis of suspicious activity and security threats. The security service is available for collocation, VPNs, dedi-cated access and dedicated servers, and includes managed firewalls, VPN service and intrusion detection.

Riptech uses a combination of filtering software and security staff to provide round-the-clock monitoring and analysis of VPNs, firewalls and intrusion-detection systems from its security operations center. Verio customers will have access to analysis, trouble-ticket status and real-time communication with security analysts through a Web interface, as well as through a toll-free number and e-mail, says Sherry Quinn, Verio's product manager for managed security services. Customers are notified of a threat by phone or e-mail within 15 minutes of a confirmation.

"What we wanted to present to customers is a vigilant protection of their network using real-time live intelligence," she says.

Intellisecurity includes seven firewall tools of varied sophistication and VPN capabilities built on software from Check Point, Nokia and NetScreen. Verio's intrusion-detection service also uses Enterasys Dragon equipment to monitor for unusual and suspicious traffic.

Quinn says customers contract for the Intellisecurity service through Verio and receive a single service-level agreement and bill. Riptech engineers configure the security policy, and install and monitor the security package.

Like Verio, Exodus uses Nokia and Check Point software in its VPN and firewall security services, which it is expanding with gateway-to-gateway coverage.

Exodus has also partnered with Aventail to offer managed extranet services, which give companies, their customers and their partners secure access to applications via the Web, says Eric Kirsten, Exodus' director of product marketing for security.

Exodus also announced an enhancement to its Cyber Attack Management Service (CAMS), which provides intrusion detection and assistance from security engineers round-the-clock.

In addition to analyzing suspicious traffic and threats, CAMS will now use cryptographic methods to monitor directories and files on host computers to ensure they are not changed. If a change is detected, an incident response team of security professionals will not only review the breach and how it occurred, but also collect evidence that can be used for prosecution.

Lydia Leong, an analyst with Gartner, says Exodus can offer a strong security service because of its years of experience and acquisition of security companies such as Arca.

"Exodus is several generations into their product offering," she says. "This is sort of generation 1.1 of the offering for Verio."

Verio probably partnered with Riptech, she says, so Verio customers could receive advanced services from an experienced security organization. Most host companies staff security services in-house, she adds.

Bob Fetterman, CEO of iDashes, a Web-based management company, says after looking after several other hosting companies, including Digex, he chose Verio because it didn't manage its security service itself.

"You have almost a check and balance on the security process," Fetterman says.

"We have a firewall that is sitting in Verio's facility, but it's all monitored by Riptech. So we feel comfortable that there's a little bit of a check and balance between the hosting and the security analysis," he adds.

The companies say the cost of the security services varies depending on customer needs.

Verio: www.verio.com; Exodus: www. exodus.com