Laserfiche WebLink
Packet Filtering <br /> With Packet Filtering , AT&T provides an optional router filter service to all DIA customers . These router filters are configured <br /> on the termination router <br /> and are generally used to help prevent unwanted traffic from entering or leaving the customer's private network. <br /> DIA IOS Firewall <br /> Dedicated Internet Access Firewall Service (DIA Firewall) is a security-specific offer providing new and existing <br />" Port+Access+CPE" DIA Service <br /> customers an option to outsource managed security services for network protection and defense against attacks . Security <br /> is enabled through an <br /> advanced firewall engine with state-of-the-art security features including packet inspection , application-based filtering (context-based <br /> access control) , <br /> per user authentication and authorization , and real-time alerts . For Port+Access DIA customers , the DIA Firewall <br />service is provided through the <br /> installation of a certified firewall platform at the customer's premise(s ) with remote configuration , management, monitoring <br />, and maintenance from <br /> AT&T's Security Operations Center (SOC) . <br /> DIA Firewall includes : <br /> Provisioning of a certified firewall platform <br /> Installation and configuration (remote) of the firewall platform <br /> 24X7 management and monitoring <br /> Firewall administration and maintenance <br /> 24X7 help desk support <br /> • Outbound , Inbound/Outbound , or Inbound/Outbound with DMZ directional traffic protection <br /> Implementation of firewall rules-base changes (per level of service) requested by customer <br /> There are three DIA Firewall levels of service available to customers . <br /> 1 . Basic Firewall <br /> a . Internet protection <br /> b . Supports Fractional T1 up to DS3 access speeds <br /> C . Choice of 0 , 1 , 2 , 3, 4 , or 5 rule-base change requests per year <br /> 2. Advanced Firewall <br /> a . Bi-Directional protection <br /> b . Supports Fractional T1 up to DS3 access speeds <br /> C . Choice of 3 , 6 , 9 , 12 , 15 , or 25 rule-base change requests per year (customer rule-base change requests greater <br /> than 25 <br /> requires an SRF) <br /> d . Choice of up to 10 IP Addresses assigned for hosted servers per year (customer requests for IP Addresses greater <br /> than <br /> 10 requires an SRF) <br /> The diagram below represents the conceptual overview for Basic and Advanced DIA Firewall: <br /> Transport BRIB Global <br /> Service Internet <br /> Customer <br /> Premises BellSouth <br /> Equipment Managed <br /> Facility <br /> 3 . Premium Firewall <br /> e . Bi-Directional protection , with DMZ <br /> f. Supports Fractional T1 up to DS3 access speeds <br /> g . Choice of 3 , 6 , 9 , 122 15, or 25 rule-base change requests per year (customer rule-base change requests greater <br /> than 25 <br /> requires an SRF) <br /> h . Choice of up to 10 IP Addresses assigned for hosted servers per year (customer requests for IP Addresses greater <br /> than <br /> 10 requires an SRF) <br /> The diagram below represents the conceptual overview for Premium DIA Firewall with DMZ: <br /> Transport BRIB Global <br /> Service Internet <br /> Customer <br /> CONFIDENTIP Premises IETAR RDIS(BeIlSouth W ITHO ITTEN PE I ON <br /> Version : 04/2007 Equipment Page 8Managed <br /> Created On : February 20, 2008 CCP-32 Facility <br />