Security Frequently Asked Questions

What is a firewall?
Why do I need a firewall?
I have a small business, why would anyone want to access my network?
What type of firewall solution does Wave2Wave provide?
Where is the firewall box placed?
Is anyone monitoring my network against an attack?
What can a firewall solution protect against?
Does the firewall protect my network from viruses?
Can I restrict Web access so users are unable to use Internet services unrelated to work?
What level of support will I receive from Wave2Wave?
What is a Virtual Private Network (VPN)?
How do VPNs work?
How would I benefit from a VPN?
Will my VPN connect me to the Internet?
How do I implement a VPN to my network?
What are the VPN requirements?
How long will it take to add additional connections to our VPN?
What happens if one of my employees leaves the organization?
Why should Wave2Wave manage my VPN?

What is a firewall?

A network firewall acts like a doorman, only letting in traffic you have given instruction to pass through. A firewall will keep your internal network secure by inspecting and then approving or rejecting each connection attempt made between your internal network and the Internet.
Back to Top

Why do I need a firewall?

Direct Internet connections make it easy for hackers to exploit internal networks. When you connect your internal network to the Internet, you are connecting directly to literally millions of other users attached to the Web, including hackers. Hackers can range from malicious thrill-seekers looking for a challenge, to corporate spies, or former employees. New hacking tools allow users to probe thousands of Internet Protocol addresses at a time. Once a hacker finds a single IP address from your business, they have total access to your most confidential documents.
Back to Top

I have a small business, why would anyone want to access my network?

There is probably more desirable information on your desktop or shared server than you realize. Do you have confidential customer information or credit card numbers stored on your network? How about information about your employees, such as social security numbers, or even bank account information? If your network is attacked, hackers can access all of your confidential information, alter it, or wipe it out. You, your customers, and your employees can become victims of cyber crime.
Back to Top

What type of firewall solution does Wave2Wave provide?

The Wave2Wave solution is based upon technical quality, reliability, scalability and manageability. The custom-built firewall is based on an ASIC microchip, making it faster than competing firewall appliances and software-based firewalls. It offers firewall/VPN in one comprehensive security solution.
Back to Top

Where is the firewall box placed?

The security appliance sits at the boundary between a corporate LAN and the Internet providing secure, high-speed access for communication between branches of a company, remote users, partners and customers. Users are authenticated and data is encrypted within the security appliance as data is moved over the Internet.
Back to Top

Is anyone monitoring my network against an attack?

Wave2Wave monitors the security appliance from our Network Operations Center and can make changes to the configuration immediately upon your request. Wave2Wave owns and manages the firewall security device, which means that you do not have to worry about being stuck with outdated equipment, software upgrades or lack of compatibility with other equipment. Your internal IT personnel can be freed up to focus on your core business.
Back to Top

What can a firewall solution protect against?

Wave2Wave Firewall is configured to protect against unauthenticated interactive logins from the "outside" world. The firewall will block traffic from the outside to the inside, but permits users on the inside to communicate freely with the outside.
Back to Top

Does the firewall protect my network from viruses?

Firewalls do not protect your network from viruses. If you are concerned about viruses, you should implement virus control measures. This can be done efficiently by using our Email Security System .
Back to Top

Can I restrict Web access so users are unable to use Internet services unrelated to work?

Yes, as part of the initial setup process, our service technicians will ask you what "policies" you want configured on the firewall. If there are certain Internet services you want blocked (such as Instant Messenger, Napster, FTP, etc), Wave2Wave will configure the firewall exactly the way you want it.
Back to Top

What level of support will I receive from Wave2Wave?

Wave2Wave Managed Security offerings include onsite needs assessment, device configuration, installation, 24/7/365 monitoring and ongoing maintenance. We will know immediately of any security problems. In addition to online support tools, our highly trained Customer Support Technicians are available 24/7/365 to answer questions.
Back to Top

What is a Virtual Private Network (VPN)?

A Virtual Private Network (VPN) creates a private communication "tunnel" over the public Internet, keeping your communications totally secure. It involves a combination of tunneling encryption, authentication and access control to carry your traffic over the Internet.
Back to Top

How do VPNs work?

The IP Secure (IPSec) specifications are made up of a suite of functions that are broken down into three main areas. 1. The first IPSec component is called the Authentication Header (AH). This provides a standard way to incorporate variable-length authentication data in each IP packet. By using the AH capability, everyone has to prove "they are who they say they are". 2. The second component of the IPSec standard is the Encrypted Security Payload (ESP). This option literally encrypts an IP packet and then wraps this encrypted data in another IP packet. While corporate and Internet routers see the "wrapper" packet, the internal data is fully protected and cannot be viewed. 3. The third component of the IPSec device is the Key Management function. This is a more powerful authentication measure. The IPSec standard method of Key Management is the Internet Key Exchange (IKE). This procedure allows VPN devices to pass encrypted authentication data to the receiving VPN device. Before a "tunnel" is created, the receiver can then check the senders "digital certificate", validate its identity and then accept or reject the VPN communication request.
Back to Top

How would I benefit from a VPN?

A VPN can be used to replace the expensive dedicated leased lines that connect your Local Area Networks (LANs). A VPN gives you anywhere-to-anywhere connectivity at a fraction of hard-wired leased line network costs. In addition, it may take up to three months to add an additional leased line to your network. A VPN can be set up in a matter of days. If your organization has telecommuters and remote users, most likely they are dialing into your network. Utilizing VPNs will save your organization long distance costs, since a VPN can provide easy access via local dial-up numbers.
Back to Top

Will my VPN connect me to the Internet?

No. A VPN is not a connection to the Internet. You will still need the physical connection to the Internet, through Wave2Wave Access (for your headquarters and/or additional offices) or through a dial-up service (like AOL) for remote users like salespeople or telecommuters. What a VPN does is protect your data as it's in transit over the public Internet.
Back to Top

How do I implement a VPN to my network?

In order to implement a corporate VPN, you will need a device at either end of the VPN "tunnel" to code and decode the messaging. On the LAN side, Wave2Wave will install a firewall/VPN box at each of your locations that need to be connected. Mobile users, such as salespeople and telecommuters, will be able to easily and securely access the corporate network with our software solution. Wave2Wave's VPN remote software, installed on any mobile workstation, will allow employees, or even business partners, to securely access data located at the central office. This design requires the remote users to obtain access to the Internet via a dial-up connection, and to maintain a static IP address to the central location.
Back to Top

What are the VPN requirements?

The VPN software requires that the workstation be Windows 95, 98, 2000 or NT compatible.
Back to Top

How long will it take to add additional connections to our VPN?

Additional VPN connections can be set up and taken down in days compared to months associated with adding or changing leased lines or frame relay services.
Back to Top

What happens if one of my employees leaves the organization?

Notify Wave2Wave immediately and we will disconnect the VPN link immediately.
Back to Top

Why should Wave2Wave manage my VPN?

With Wave2Wave VPN, you are not required to invest and maintain the VPN equipment. Wave2Wave will integrate the VPN service with our core network Quality of Service capabilities. The Wave2Wave solution is a full-featured integrated VPN gateway that can securely transport data over public networks.
Back to Top