HIPAA
Security Services

HIPAA Intrusion Prevention System

Our Intrusion Prevention System (IPS) works off of a continually-revised database of malware and other potential hazards, and features customizable security infrastructure that allows us to tweak it to your specific needs. We routinely test and re-test all components of our IPS, and allow upgrades on an as-needed basis. Threats are monitored and prevented in real-time.

Our IPS also features a powerful Firewall Appliance which connects to each interface, monitoring everything from CPU usage to response rate for gateways. For those of you who require traffic shaping and simultaneous connection limitations, both are easily configurable.

All of this is available at minimal cost - meaning you'll have access to world-class security at a price that won't leave you tapped out.

Anti-Malware Protection:

One of the stipulations for HIPAA is that healthcare organizations must utilize an antimalware application to remain compliant. Atlantic.Net's engineers trust Trend Micro Anti-Malware to protect clients from malicious software.

Dedicated Firewalls & Encrypted VPN

In addition to our IPS system, Atlantic.Net provides a powerful set of managed firewall components, designed with optimal affordability and security in mind. We're able to create out-of-the-box solutions for just about any configuration, including Linux servers or even Cisco ASA Firewalls. Reporting maintains historical information on every aspect of your system related to network security, including CPU utilization, firewall states, WAN gateways, and traffic shaping.

By default, we deploy an OpenBSD stateful firewall that allows you to granularly control your states. This allows you to limit states per host, new connections per second, state timeout, state type, and simultaneous client connections. It allows the handling of multiple states, as well as outlined below:

• Keep state - Works with all protocols. Default for all rules.
• Modulate state - Works only with TCP. Atlantic.Net's Firewall Appliance will generate strong Initial Sequence Numbers (ISNs) on behalf of the host.
• Synproxy state - Proxies incoming TCP connections to help protect servers from spoofed TCP SYN floods. This option includes the functionality of "keep state" and "modulate state" combined.
• None - Does not keep any state entries for the traffic. This is very rarely desirable, but is available because it can be useful under some limited circumstances.

It also offers a number of state table optimization options:

• Normal - The default algorithm.
• High latency - Useful for high latency links, such as satellite connections. Expires idle connections later than normal.
• Aggressive - Expires idle connections more quickly. Uses hardware resources more efficiently, but can drop legitimate connections.
• Conservative - Tries to avoid dropping legitimate connections at the expense of increased memory usage and CPU utilization.

Last but certainly not least, our dedicated firewalls are connected to a management service that'll help you ease the burden of monitoring.

This management service allows us to help you implement switches that can be used to set up encrypted VPN connections (we support OpenVPN, IPsec, and PPTP by default) to and from your hosted servers. HIPAA compliance requirements are kept central to the entire process, from management to maintenance to troubleshooting. It's efficient, too • we realize that your time is important, so we rtay with you every step of the way to make compliance a breeze. Click here to learn more about our managed firewall service.

NAT

All Atlantic.Net clients by default have access to our Network Address Translation Utility, designed to allow them to quickly and easily shape how their network functions. It features easy configuration for port forwarding (including ranges and the capacity to support multiple public IPS), outbound NAT, and advanced load balancing for both inbound and outbound connections. Integrated with the firewall appliance, it can be readily set up with full redundancy thanks to pfsync and CARP from OpenBSD.