DirectPointe security package

Powered by SC Magazine
 

DirectPointe provided a hosted security offering which included managed firewall and managed intrusion prevention. The offering uses a SonicWall-based firewall that performs automatic blocking of network attacks.

Because of the automatic blocking, we were never contacted during the duration of our tests despite the SLA requirements to the contrary. This is a problem because, although common scans against the firewall don’t usually generate much concern, a concerted effort, such as our Core Impact attack, should get the MSSP’s attention.

The offering performed security defending of the application very well. Our Nessus scan was disengaged even before the number of open ports could be enumerated, and the application blocked attempts at buffer overflows by blocking our testing IP address.

DirectPointe also includes access to an administration web portal, unique in that the user has the ability to administer the security of the hosted application.

There was no installation of the application due to the outsourced nature of the offering. The application was downloaded from the laboratory site and uploaded to the system with no activity from SC Labs. In addition, documentation was not needed; again because of the outsourced nature of the offering.

Phone and email support are available and readily usable. The staff is knowledgeable and helpful.

The pricing for the DirectPointe offering is at the low end of offerings in this Group Test, though actual pricing depends on the size of the implementation and the SLA. This offering seems perfectly positioned for organizations that need outsourced managing of an application due to audit or regulatory compliance, but are not looking for additional features beyond the basics.

Our only concern would be the speed at which DirectPointe responds in the event of an incident. Clearly, the reason for engaging an MSSP is to protect the enterprise. That consists not only of providing a firewall, it also consists of managing alerts and taking appropriate note of attacks. Depending on intrusion prevention as the only defense is not the best way to defend mission critical applications.

DirectPointe security package
 
Features:
Ease of Use:
Performance:
Documentation:
Support:
Value for Money:
Overall Rating
Verdict:
For: Good security, easy to set up and good support coupled with a low price make the DirectPointe offering a viable solution.
Against: A lack of response by the security/network operations center is a major problem.
Verdict: A good offering that focuses on the lower priced market and still provides good services and security. Better response times to threats would improve the overall rating of this solution.
Product Info
Supplier:
 
 
 
 
Top Stories
Earning the right to innovate
Breaking down the barriers to innovation is a long, but rewarding process, says Bank of Queensland Group CIO, Julie Bale.
 
A call for timely reporting
[Blog post] Businesses need incentives to keep customer data secure.
 
Doubts cast on Queensland's ICT Dashboard
Opposition, former Govt CIO say it can't be trusted.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
What is delaying adoption of public cloud in your organisation?







   |   View results
Lock-in concerns
  26%
 
Application integration concerns
  3%
 
Security and compliance concerns
  29%
 
Unreliable network infrastructure
  9%
 
Data sovereignty concerns
  22%
 
Lack of stakeholder support
  3%
 
Protecting on-premise IT jobs
  5%
 
Difficulty transitioning CapEx budget into OpEx
  3%
TOTAL VOTES: 853

Vote