Re: A multi-tenant firewall for an MSSP

2015-08-17 Thread Andrew Jones
Is there a multi-tennant capable UTM from Sophos? Or are you using a vm instance per customer? Thanks, Andrew On 17.08.2015 16:47, Colin Johnston wrote: sophos utm works great :) Colin On 17 Aug 2015, at 05:56, Rakesh M wrote: I have seen one of our customers using Sophos and they are rel

Re: A multi-tenant firewall for an MSSP

2015-08-17 Thread alvin nanog
hi > On Mon, Aug 17, 2015 at 10:16 AM, Ramy Hashish > wrote: > > We are planning to implement a multi-tenant FW/UTM and start providing > security as a service, I would like to hear if anybody had experience on that'd be a good thing ... but ... > this, and if there are any recommendations f

Re: A multi-tenant firewall for an MSSP

2015-08-17 Thread Ramy Hashish
Thank you Rakesh and Colin. I just want to amend something, "FW as a service" rather than "security as a service". Are you sure sophos has such a solution? Thanks, Ramy On Mon, Aug 17, 2015 at 9:47 AM, Colin Johnston wrote: > sophos utm works great :) > > Colin > > > On 17 Aug 2015, at 05:56

Re: A multi-tenant firewall for an MSSP

2015-08-17 Thread Colin Johnston
one vm per sophos utm per customer works well even with low ram as well Colin > On 17 Aug 2015, at 08:14, Andrew Jones wrote: > > Is there a multi-tennant capable UTM from Sophos? Or are you using a vm > instance per customer? > Thanks, > Andrew > > On 17.08.2015 16:47, Colin Johnston wrote:

Re: A multi-tenant firewall for an MSSP

2015-08-17 Thread Rakesh M
Have a look below Ramy pdf https://www.sophos.com/en-us/medialibrary/PDFs/partners/sophos_complete_security_msps_dsna.pdf?la=en On Mon, Aug 17, 2015 at 12:59 PM, Ramy Hashish wrote: > Thank you Rakesh and Colin. > > I just want to amend something, "FW as a service" rather than "security as >

Re: Drops in Core

2015-08-17 Thread Patrick W. Gilmore
On Aug 16, 2015, at 8:44 AM, William Herrin wrote: > On Sun, Aug 16, 2015 at 8:00 AM, Patrick W. Gilmore wrote: >> On Aug 15, 2015, at 1:41 PM, Job Snijders wrote: >>> On Sat, Aug 15, 2015 at 11:01:56PM +0530, Glen Kent wrote: Is there a paper or a presentation that discusses the drops in

China Telecom / China Unicom IP Transit Pricing

2015-08-17 Thread James Braunegg
Dear All Just wondering if anyone can share with me target IP Transit pricing they have been able to achieve with China Telecom and China Unicom delivered to LA or AMS, after rounds of negations. Capacity Required (1G to 10G) Bonus points if you have contact information for someone who can pro

Re: China Telecom / China Unicom IP Transit Pricing

2015-08-17 Thread Colin Johnston
Is this based on 90% to 95% of the traffic is invalid/spam/scans/direct-attacks ? If based on engagement with abuse teams then give a factor for engagement, otherwise don’t bother. Colin > On 17 Aug 2015, at 13:10, James Braunegg wrote: > > Dear All > > Just wondering if anyone can share wi

RE: Cogent revisited

2015-08-17 Thread Matthew Huff
There is also the problem with multi-homed customers where Cogent is in the mix. The dropped packets at Cogent's peering points to eyeball networks break certain protocols that are packet loss sensitive (VoIP, IPSEC, etc...). Matthew Huff | 1 Manhattanville Rd Director of Opera

Re: Drops in Core

2015-08-17 Thread Justin Wilson - MTIN
I could see it going through several private peering, but not through multiple exchanges. Justin Wilson j...@mtin.net --- http://www.mtin.net Owner/CEO xISP Solutions- Consulting – Data Centers - Bandwidth http://www.midwest-ix.com COO/Chairman Internet Exchange - Peering - Distributed Fabr

Re: Drops in Core

2015-08-17 Thread Patrick W. Gilmore
Terms get over-used & overloaded in many cases. So it is difficult to tell if this is just a miscommunication, but I think I disagree with this statement. “Private Peering” in the strictest sense is still peering. You do not have “private peering” with your transit provider, even though the traf

Re: A multi-tenant firewall for an MSSP

2015-08-17 Thread Christopher Morrow
of course checkpoint. On Mon, Aug 17, 2015 at 4:57 AM, Rakesh M wrote: > Have a look below Ramy pdf > > https://www.sophos.com/en-us/medialibrary/PDFs/partners/sophos_complete_security_msps_dsna.pdf?la=en > > > > On Mon, Aug 17, 2015 at 12:59 PM, Ramy Hashish > wrote: > >> Thank you Rakesh and C

Re: A multi-tenant firewall for an MSSP

2015-08-17 Thread Dave Taht
On Mon, Aug 17, 2015 at 9:27 AM, alvin nanog wrote: > > hi > >> On Mon, Aug 17, 2015 at 10:16 AM, Ramy Hashish >> wrote: >> >> We are planning to implement a multi-tenant FW/UTM and start providing >> security as a service, I would like to hear if anybody had experience on > > that'd be a good th

Re: Drops in Core

2015-08-17 Thread Scott Whyte
On 8/15/15 09:47, Glen Kent wrote: Hi, Is it fair to say that most traffic drops happen in the access layers, or the first and the last miles, and the % of packet drops in the core are minimal? So, if the packet has made it past the first mile and has "entered" the core then chances are high t

Re: Drops in Core

2015-08-17 Thread Christopher Morrow
On Mon, Aug 17, 2015 at 1:44 PM, Scott Whyte wrote: > > > On 8/15/15 09:47, Glen Kent wrote: >> >> Hi, >> >> Is it fair to say that most traffic drops happen in the access layers, or >> the first and the last miles, and the % of packet drops in the core are >> minimal? So, if the packet has made i