Dedicated Cloud Servers

An Intrusion Prevention System or IPS is a network security device which scans all incoming unencrypted data for signatures unique to malicious traffic or intrusion attempts. An IPS also detects malformed requests used in Denial of Service attacks. BrightHost’s Intrusion Prevention System will automatically block these threats and alert us to thier origin so that we may respond accordingly.

A tripwire system is used to detect the presence of an intruder inside a system. This ensures that if other security functions are bypassed it is still possible to identify and clean the threat. A tripwire is a key part of any defense-in-depth strategy.

Any dedicated cloud server hosted within our network will automatically undergo a weekly vulnerability scan. This scan is performed by an independent security vendor to test that all of our protection systems are working correctly and that any new threats are being defended against.

Managed Anti-Virus is installed on every Windows Cloud Server with status and software updates controlled centrally. This ensures that all hosted servers are protected from all current virus, worm, and malware threats.
(Windows Cloud Servers Only)

In the unlikely event that malicious software is installed into a server, it must ‘phone home’ once installed to receive updates and attack instructions. By blocking all outgoing network traffic other than specific exceptions, our firewall solution provides yet another layer of protection by neutralising any intrusion before it can reinforce itself.

A system which is secure today is not guaranteed to be secure tomorrow. New exploits and methods of attack are being developed all the time. BrightHost’s patching solution, based on VMware Update Manager, will automatically download and install updates of all major operating systems and applications once a month without the need for customer engagement. Virtual snapshots are taken before each update so that if anything goes wrong, we can safely restore to an earlier state.

It’s not always right to share. By employing Virtual LANs and strict network controls we ensure that any virtual servers in our environment are entirely isolated from all other servers in the environment. This guarantees that in the unlikely event that another server becomes infected, it poses no threat your own.

Security begins in the office and no network security plan is complete without training and policies established to aid staff in making informed decisions about how to manage and response to network security threats. We work hard to ensure that our team is kept up to date on the latest threats and techniques to ensure all-round security.