Network Security

Our approach to your website security

Strategies takes the security of its network, applications and the storage of your data extremely seriously. Our operations team and developers work closely together to create robust, secure products and applications that adhere to best industry practices when dealing with network security.

You have the added assurance that our data centre, infrastructure and working processes are fully compliant and accredited with all the relevant industry certifications

In addition, our physical location has 24/7 manned security, CCTV, intruder detection, and 3 factor access control.

Access to Servers

Physical access to servers is tightly guarded and only designated to key network and infrastructure employees. Internal network access is conditional with team members only provisioned details for servers they require access to. External access is secured to the individual ports required for HTTP and HTTPS access, with anything additional being subject to our IT manager’s approval.

Intrusion Detection & Firewalls

Strategies’ core network is protected by up to date UNIX based packetfiltering firewalls. An intrusion detection and prevention system is in place to help protect against a variety of web application attack vectors and also detects and mitigates DDoS attacks. All public facing HTTP and HTTPS traffic passes through this resilient and redundant platform before entering a secure DMZ. We make use of advanced caching and reverse proxy methods to help reduce load on backend servers and add an extra layer of security.

Monitoring

A monitoring system is deployed to alert the networking team 24/7 to any issue on any system in the datacentre. From CPU usage to network outages we immediately know if there is an issue as quickly as possible so we can resolve it in a timely fashion to keep downtime to a minimum.

We continuously monitor official sources, technical blogs and security mailing lists for vulnerabilities in the software and operating systems that we utilise. In the event of a reported software exploit the team rapidly assesses the situation and potential effect it may have on clients and the network as a whole. Once this assessment is complete the team mitigate in the form of patches, upgrades, segregation or even deploying alternative solutions.