Audit Services Brochure

Introduction

Dear Reader,

Infinigate UK TechServices have been providing professional services for a wide variety of vendors in the IT security marketplace for over ten years. In that time we have discovered that after initial deployment of a solution very few changes are made to the configuration. Often we find that IT teams are overstretched, do not get adequate understanding of the solution or are simply juggling too many roles to be an expert in any. It ultimately leads to the solution being replaced as it is no longer working effectively for the business.

Our goal is to improve the security of our customers and with our experience it made perfect sense to us that we should extend this expertise as services to aid your business. Audits allow us to assess your solution, with the aim of providing comprehensive feedback on the discovered weaknesses and strengths.

We hope that this feedback will help highlight areas where the configuration within your system would be strengthened and continue to make your solution effective for your business.

Yours,

Simon KingHead of IT and TechServicesInfinigate UK

3

Introduction

Dear Reader,

Infinigate UK TechServices have been providing professional services for a wide variety of vendors in the IT security marketplace for over ten years. In that time we have discovered that after initial deployment of a solution very few changes are made to the configuration. Often we find that IT teams are overstretched, do not get adequate understanding of the solution or are simply juggling too many roles to be an expert in any. It ultimately leads to the solution being replaced as it is no longer working effectively for the business.

Our goal is to improve the security of our customers and with our experience it made perfect sense to us that we should extend this expertise as services to aid your business. Health-checks allow us to assess your Secure Email Gateway solution, with the aim of providing comprehensive feedback on the discovered weaknesses and strengths.

We hope the feedback provided in the following report will help highlight areas where the configuration would be strengthened and continue to make Secure Email Gateway an effective solution for your business.

Yours,

Simon King Head of IT and TechServices Infinigate UK

Listen

Access

Report

Discuss

Remediate

It is no secret that regular maintenance of any solution is the key to maintaining the health of business critical services. Infinigate UK TechServices are ideally suited to assess the health of your solution to provide accurate feedback and recommendations against known best practises and threats.

Infinigate UK recognises that the key to success with any project is listening and understanding a clients requirements. Therefore prior to your audit, a telephone call will be arranged so that we can understand your environment and your expectations from the audit.

An Infinigate UK TechServices consultant will work on-site or remotely, comprehensively assessing the health of your solution and how it interacts with your IT infrastructure.

A report, tailored to your initial requirements will be produced highlighting potential improvements and areas of concern. The report is divided into easy to evaluate sections with a priority based score for each.

At an agreed time a telephone call will be arranged to run through the findings of the report. This call provides an opportunity for questions, feedback and a discussion on remediation strategy.

Audits often uncover vulnerabilities or errors in configuration which may require significant effort to resolve. Should you require any assistance with this, Infinigate UK TechServices can provide professional services at an additional cost.

Overview

Services

Ipswitch makes software for businesses to securely transfer files, and communicate via e-mail. Their products are designed to increase productivity for people and organisations. Ipswitch products save time and money by being easy to learn, use, support and maintain. Focusing on these priorities has helped Ipswitch meet the needs of millions of customers around the world since 1991.

Available Audits• File Transfer• File Transfer + Central

Safend Data Protection Suite protects organisations from data leakage and theft with a single software product, providing granular port and device control, transparent hard disk encryption, comprehensive removable media encryption and accurate content control.

Available Audits• Data Protection Suite

Trustwave is the leading provider of on-demand data security and payment card industry compliance management solutions to businesses and organisations throughout the world. Trustwave has helped thousands of organisations, ranging from Fortune 500 businesses and large financial institutions to small and medium-sized retailers. Helping to manage compliance and secure their network infrastructure, data communications and critical information assets.

Available Audits• Secure Web Gateway (SWG)• MailMarshal• WebMarshal

Services

Other services

Infinigate UK offers professional services across all supplied solutions. Infinigate UK consultants and engineers have hands on experience, accreditations, training and work within a defined framework to deliver services to the highest standards. Our experience includes design, implementation and project management consultancy services across many different organisations.

Fully-loaded, fully-capable, and fully-standard, Ruckus' Smart Wi-Fi products and patented technologies offer unmatched simplicity, ridiculous reliability and killer coverage — at a fraction of the cost of alternatives.

Available Audits• Wireless Audit

Mojo Networks offer the next generation of WiFi infastructure with their cloud-managed WiFi platform and WiFi access points, all which are fully integrated and can be purpose-built for any enterprise.

Available Audits• Wireless Audit

SecurEnvoy provide a solid and reliable innovative solution for two factor authentication that millions of users experience everyday that's easy to use, manage and deploy.

Available Audits• SecurAccess

Services

What will you get?

The results of our audits are published in a personalised and comprehensive report, which will be sent to you electronically.

This report is yours to keep and provides useful feedback on the results of each test. In addition your environment is scored base on your results in each category and overall.

11

Secure Email Gateway is updated to the most current release? Having the latest release of Secure Email Gateway ensures the solution is operating with the latest patches and spam engines definition files. A large portion of all support cases for Secure Email Gateway can be resolved by upgrading to the latest release.

Result:

Severity:

Mitigating circumstances and Notes:

License expiry action is set to allow all emails to pass unfiltered? The default action in Secure Email Gateway upon license expiry is to halt all email flow. It is recommended that the default action be set to “pass unfiltered” as although this may expose your organisation to security threats in the unlikely event your license lapses, it will ensure the solution will not affect your organisational productivity.

Result:

Severity:

Mitigating circumstances and Notes:

Secure Email Gateway is licensed and a maintenance renewal is not due for three months or more? Secure Email Gateway must be have a valid license in order to process and scan e-mail. Ensure you are aware of your renewal date so not to interrupt e-mail flow as an invalid license will cause Secure Email Gateway to halt email. Keeping your maintenance contract active provides access to technical support and the latest updates for Secure Email Gateway. If either your license or maintenance contract need renewing, please contct your Trustwave reseller or the Infinigate UK Trustwave sales team for assistance.

Result:

Severity:

Mitigating circumstances and Notes:

7

Health Check Summary

This report contains 39 individual tests which are scored in sections to provide an easier read and to help with the creation of a

remediation strategy. Below is a quick view summary which will highlight particular sections of concern and how this affects the

overall health check score. Remember that the score is based on the severity of a test, which means a high number of failures may

result in a higher than expected overall score.

System Status

4.7 Health Check Score:

5.7

Security and Threats

2.4

Connectivity and Architecture

2.4

Disk Utilisation and Archiving

7.1

External DNS

8.7 We calculate your score by finding the average of all the

section scores. For a detailed analysis of those tests which

determine the score, refer to the corresponding section of

this report. Custom Rules

8.9

System Status Test Question

Result

Secure Email Gateway is updated to the most current release?

License expiry action is set to allow all emails to pass unfiltered?

Secure Email Gateway is licensed and a maintenance renewal is not due for three months or more?

The currently installed version of Secure Email Gateway is supported by Technical Support?

Secure Email Gateway is currently licensed for an anti-virus engine?

Secure Email Gateway is currently licensed for the blended threats module?

Spam Quarantine Manager is installed and scheduled digests being sent?

Connectivity and Architecture

Test Question

Result

DNS servers assigned to Secure Email Gateway are contactable via ICMP?

10

System Status

Our testing criteria for system status includes an assessment of licensing validity, which modules have been licensed, which version of Secure Email Gateway is in use and whether or not your system is receiving scheduled automatic updates. Failures in this section of the health check may result in a loss of solution features which can indirectly affect overall security.

Section Score

5 x Pass Results } { Failed Test Severities:

2 x Fail Results

2 x

0 x

0 x

You are licensed for 7,000 users

Your license expires on

23/12/2014

4.7

Your Secure Email Gateway

Version:

Latest Secure Email Gateway

Version:

6.9.3.8000 7.2.3.6978

The purpose of this report is not to highlight problematic issues but to create awareness of areas which may have been missed or overlooked.

At Infinigate UK we are proud of the experience and knowledge we have, but we acknowledge this is can only be put to good use when provided back to our clients. Therefore we hope that the information provided in this report helps you to build a stronger solution, one which presents a lesser risk and one that you can ultimately trust.

As a professional services team, we can provide post-sales consultancy to help you to remediate any of the items highlighted in this report.

Conclusion

Infinigate UK © 2015

About Infinigate TechServicesInfinigate UK offers professional services across all supplied solutions. Infinigate UK consultants and engineers have hands on experience, accreditations, training and work within a defined framework to deliver services to the highest standards. Our experience includes design, implementation and project management consultancy services across many different conplex environments and mission critical sites.

Our consultancy team work with reseller partners to assist in the smooth delivery of projects and provide training, knowledge transfer and project management for most of our vendor’s solutions. A fundamental part of our process is building a statement of work to define expectations prior to carrying out any work and to confirm delivery in all cases to ensure customer satisfaction. We have experience in managing projects ranging from a single days installation of a single solution through to 30+ day projects covering 4-5 Infinigate UK solutions

Contact Infinigate TechServices

Need to ask us a question or send us some feedback?

Please contact Infinigate TechServices today on:Tel: 0845 4900 245marketing@infinigate.co.uk