The iPolicy Networks security solution was designed from the ground up to address the requirements of the Managed Security Service Providers and of organizations that want to deliver centrally managed network-based security to various constituents.

The distinct advantages of the iPolicy Networks solution are support for security domains, exceptional performance, and centralized management. With iPolicy Networks, security services can be defined on a customer basis by assigning them a Security Domain which is a virtual Intrusion Prevention Firewall that can be independently managed and configured.

A single physical Intrusion Prevention Firewall can support hundreds of Security Domains –i.e. hundreds of unique customers- concurrently. Adding a new customer is a software-based provisioning task that requires no new hardware deployment. Furthermore, a Security Domain may execute across distributed physical Intrusion Prevention Firewalls. For example, a customer with three geographical locations may link to his carrier through a POP close to each location. Security will be enforced at each POP by a physical Intrusion Prevention Firewall yet the customer’s security is still managed as a single Security Domain.

Carriers interested in delivering high-value custom managed security services to companies with sophisticated security needs value the flexibility of iPolicy Networks’ solution. Security functions such as firewall, IDS/IPS, URL screening, etc. can be individually enabled and policies can be individually tailored for each customer by assigning them a unique Security Domain.

Carrier A Case Study
This case study illustrates how a major US Carrier the carrier who wishes to stay anonymous increased revenue per leased line by a factor of three-to-six by deploying the iPolicy Networks solution to offer managed security services in addition to connectivity and bandwidth.

Sprint Case Study
This case study documents how Sprint, who deployed a network-based managed URL Screening service along with iPolicy’s L3-7 stateful inspection firewall, was able to recover its entire investment in iPolicy Networks’ security solution with a single large enterprise customer who needed security at 2000 locations.

Alternatively, Service Providers may select to restrict their offering to a set of pre-packaged security services. Packages offered may include mitigation of DoS/DDoS attacks, protection from worm and virus propagation, restricted access to pre-set categories of Internet web sites, etc. Each package is implemented with a Security Domain and customers are asked to choose from a list of available options. This alternative MSSP model is attractive to smaller ISPs and smaller Telcos because no costly custom configuration is required. It provides them the opportunity to enhance their connectivity services with low-cost security services that generate high-margin incremental revenue. It also provides a means to differentiate themselves form pure bandwidth providers. In addition to protecting end-user computer equipment from possibly harmful attacks, these services “clean the pipe”, freeing up bandwidth for legitimate traffic. This means the service provider can add more customers without incurring added bandwidth cost.