|
Security and privacy are critical to nearly all major initiatives in the financial services industry, in order to protect customer information, reduce risk of lawsuits, prevent damage to reputation, and achieve compliance with applicable regulations.
Netfast has discovered there are four primary sources of threats for a financial services network:
-
Attachment to the global Internet - while required for research as well as customer access, the global Internet posses the most likely source of attack from external sources.
-
Malicious employee - either disgruntled or motivated by profit, the internal attacker is a serious threat to the firm.
-
Unknowingly malicious employee - a good employee accidentally takes an action which unknowingly compromises his computer. For example, the employee takes his laptop home, connects to the Internet, unknowingly downloads a Trojan or key logger, and returns to the office the next day, providing a remote hacker free reign of the network.
-
Directly connected partner, third-party company, vendor or consultant - a trusted third party that is unknowingly compromised, or unable to contain an exploit that has affected its systems.
The solutions we provide to counter the threats are:
-
User end application awareness which provides very granular access policy, down to the specific file or URL. We have partnered with Vernier Networks who have a product to meet this need.
-
Intrusion Detection and Prevention (IDP) product line offers layer 4 through 7 (application aware) processing of packets in real-time. We have partnered with the industry leading ID/P product from Juniper Systems which is the Netscreen group of products.
-
Anti-virus solutions along with web/URL filtering. We have partnered with Symantec to provide anti-virus solutions along with some one industry partners.
-
Email security solutions using phising, pharming and SPAM. We have partnered with both Cipher Trust and Barracuda, who both have appliance boxes that handle this need,
-
Firewalls are the cornerstone of policy enforcement in the enterprise network and there are two varieties of VPNs that provide data encryption. IPSec and SSL (Secure Sockets Layer) VPNs. While VPN technologies such as MPLS and IEEE 802.1Q VLANs provide granular traffic separation, only IPSec and SSL provide data confidentiality. Our Partnership with Juniper Systems supports his need.
Netfast provides a range of security solutions to help financial services firms concerned with compliance with legislation such as Gramm-Leach-Bliley Act (GLBA), Sarbanes-Oxley, FFIEC, State regulations such as California SB 1386 and other regulations such as FDIC and Federal Reserve best practices.
For more information about Netfast solutions and services for financial organizations contact us at:services@netfast.com or call 718-706-4140.
|
