Security Expertise

For reliability and trust on the Internet, we focus all of our services on Security. Here are a few "standard" solutions we provide.

Firewalling

This very first and essential brick of security lets you filter network traffic, depending on services your networks run. Our IP filtering solutions are, of course, customized to your needs.

Virtual Private Networks

If your business is splitted in several locations, or you have to deal securely with privileged partners of yours, VPN is a solution for you. Triple DES encryption secures and authenticates your sensitive network traffics, even though you use your public Internet link to send and receive them.

Filtering Proxy Server

You can filter network traffic at a higher level than an IP filter does, with the help of our Proxy and Reverse Proxy solutions. Conventionnal Proxy lets you filter which web sites and contents can be visited from your network, and reverse proxy filters incoming web connections. Proxies also let you cache contents, in both cases, to optimise network bandwidth use or your webservers' load.

Spam and Antivirus Filters

We provide Spam filters for your incoming email traffic. We guarantee at least 95% of spam to be caught by our solution.
Our antivirus solutions are available both for email traffic and Network file systems scanning.

System Security

We provide secure installations and update procedures. We strengthen the Linux Kernel, using the grsecurity features, adding protections against buffer overflow attacks, adding entropy to the TCP/IP random ID generator, and restricting users permissions in a very flexible way. We also provide Host Intrusion Detection Systems, that periodically check the integrity of your filesystem against a trusted database.

System auditing

When a server gets broken into, it is important to understand where attack came from, and which services were exploited by the intruder. Often, finding a compromised host is the beggining of a series, revealing other problems on other hosts.
We have experience in examining compromised hosts, and looking for the intruders tracks.

Network Intrusion Detection Systems

These monitor packets on the network wire, and compare each of them with a database of known attacks. Every recognised malicious attempt is then logged, and action can be taken against the attackers.