HIPPA Compliance Features:

Data Center Physical System Security

• Minimize Risk of Loss and Theft

• 24x7x365 manned facility
• Multiple closed circuit tv security cameras, covering all entrances and datacenter space. Such system is operated 24/7/365 by a third party Security Company.
• Site entrance controlled by electronic perimeter access card system

• Minimize Risk of Damage

• Liquid Web Data Centers are high security facilities.
• Liquid Web Owns and Operates private Data Centers, which allows us to design, build and maintain ideal server environment.
• Our Data Centers have been designed using reinforced poured concrete, which provides high strength, high tensile strain, good bond with thermal compatibility which results in durability in the concrete within the external walls.
• We are located in premium geographic locations, neutral to natural phenomena such as earthquakes or hurricanes.

• Fire Prevention

• Dry Pipe Preaction, Double Interlock System.
• Resistant to high and low external ambient temperatures, preventing damage to the fire suppression system.
• Compliant with NFPA 13 regulation and divided into regions for effective use.
• Effective in ensuring server protection in case of accidental physical damage to the sprinkler system.
• Requires that both a “preceding” fire detection event, typically the activation of a heat or smoke detector, and an automatic sprinkler operation take place prior to the “Action” of water introduction into the system piping.

• Entry Security - Access Controls

• All exterior entrances secured by mantraps with interlocking doors.
• Access to the Data Center space requires proximity badge with names and employee pictures printed on them.
• Visitors are required to provide a valid official government issued identification or driver’s license and sign in prior entering facilities. All visitors are escorted by designated employees at all times. Visitors are required to wear a visible VISITOR’s badge at all times. These badges DO NOT have access to any electronic doors.
• Only authorized personnel can access Data Center where servers are physically located.

• Uninterruptible Power Supplies (UPS)

• Multiple N+1 MPS Generators.
• Multiple fuel contracts around the State that ensure fuel availability for generators.
• Multiple N+1 UPS Systems with 30 minute minimum runtime.
• Server Chassis with redundant power supplies in combination with A+B power configurations available (Different UPS and Generator circuit paths).
• Redundant ASCO Closed Transition Bypass Isolation Transfer Switches.
• Capability to provide Tier-4 Power
• Four 10 megawatt feeds available
• Diverse paths from substation
• 2N power available

• SSAE-16 (formerly SAS70) & Safe Harbor Compliant.

Security Zones

• Office space is separated from Data Center Space. Proximity badges are required to access Data Center space.

• All Employees are screened upon employment.

• Physical server rack enclosures are available that guarantee private server space. These racks are equipped with key locks to prevent unauthorized access.

• Component level redundancy available for hard drives including hot and cold spare onsite servers.

Technical Security

Network Configuration and Security

• Network Device Management

• Hardware Cisco Firewall Devices available with full management by qualified Engineers available 24/7/365. Our Engineers are able to provide best practice recommendations for Network Device Passwords (Customer’s responsibility). In addition, we are able to provide assistance with logging for Network devices, Application Servers and Critical Devices. Liquid Web can provide assistance with best practice recommendations, customers are responsible for implementing, maintaining and reviewing log information via a set policy including retention.
• Our Engineers can provide assistance with Hardware firewall configuration in an effort to implement outbound and inbound traffic filtering (Leased managed Cisco device required).
• Intrusion Detection/Intrusion Prevention Modules available.
• Network redundancy options available to ensure failover.
• Diverse connectivity fiber paths into building
• Dedicated meet-me room
• Bandwidth co-op solutions
• Carrier neutral
• On-net transport to most major global cities

• Remote VPN

• We offer remote secure VPN implementations and management with our leased Cisco devices which assist with:

• Encryption (Triple DES or AES)
• Authentication (Site-to-Site VPN Tunnels) with strong passwords, pre-shared key and certificate
• DMZ Implementations
• Assistance with log management and monitoring.

Backup Management

Liquid Web Guardian is a fully managed robust backup solution that provides continuous data protection and off-site disaster recovery for Linux and Windows Dedicated Servers. Liquid Web Guardian uses replication and synchronization, with point-in-time snap shots, to provide up to the minute data protection of your complete server configuration. In the case of a catastrophic event, our Sonar^® Monitoring Team recovers your exact server configuration to what it was several minutes before the event occurred. In other words, Liquid Web Guardian is a Backup solution that continuously captures your entire system configuration to an off-site facility which allows for up to the minute recovery of your information.

Features

• Continuous Backups During normal host operation, the Liquid Web Guardian agent keeps a journal of disk changes. Incremental backups know what sectors on the disk have changed before the backup operation even starts. Guardian’s method is less resource intensive than traditional file-by-file or block-by-block backup methods.

• Incremental Snapshots Our technology provides consistent point-in-time system-wide backup images.

• Bare-Metal Disaster Recovery Restore servers directly from disk-based backup. Unlike traditional backup software, there is NO need to first partition your drive and install the operating system. Bare-Metal-Recovery greatly increases the speed of complete system recovery from a catastrophic failure.

• High Performance, Low System Impact Sector based backups increase throughput and reduce overhead. Servers can be fully operational with minimal performance impact during backups. Backups can usually be performed at anytime, even on busy servers.

• cPanel Administration Plug-in Our Managed Dedicated Server customers who are running Linux can take advantage of the Liquid Web Guardian cPanel Plug-in, accessible directly from your cPanel interface for easy management of your backups.

• MySQL Database Backup Plug-in Continuous table level backup of MySql databases is available as an optional plugin.

Security Services

• Server Secure Plus - We have innovated on top of our exclusive ServerSecure^™ installation service. A setup option available for our dedicated servers, ServerSecure^™ ensures optimal compatibility, paramount integrity and the most efficient usage of your server/servers. We have upgraded this service to iron-clad standards by adding daily CSX scans and a multitude of server hardening features available exclusively to those opting for ServerSecurePLUS^™. What would have taken hours of installation work and the help of an outside system administrator, is now at your fingertips with the help of ServerSecure^™ and ServerSecurePLUS^™.

• Brute Force Detection and Evasion
• Apache DOS Prevention/Protection
• E-Mail Virus Filtering

Exclusive to ServerSecurePLUS^™

• Daily CSX Scan
• SSH/cPanel/FTP Hardening
• WebServer & PHP Hardening
• Monthly Nessus^® vulnerability scans

• DDOS Attack Protection/Mitigation

• Detect and block emerging application-layer
• DDoS attacks
• Deploy a turnkey solution to stop threats
• Accelerate responses to DDoS attacks to prevent legitimate services from going down
• Prevent illegitimate botnet communications by leveraging real-time security intelligence
• Mitigate volumetric attacks
• Block illegitimate traffic from costing you money in bandwidth charges