AT&T Network-Based Firewall v3
Strengths: Full-managed firewall with IPS and web filter.
Weaknesses: Some real-time control is lost by the administrator, and response time is a bit higher than average.
Verdict: A solid service if you want a completely outsourced offering.
The Network-Based Firewall service provided by AT&T protects a customer's WAN by providing secure inbound and outbound internet access through security gateways. This service also provides a consistent enforcement of security policies to all customer locations without premises equipment. The Network-Based Firewall continuously inspects and treats inbound and outbound traffic according to the customer's pre-defined security policies.
The AT&T Firewall itself resides onsite at AT&T, so there is no equipment to be installed at the customer site. Users must submit change requests to AT&T for policy changes. Interaction with this service by the customer is done through two web-based interfaces.
The first is the iPolicy Server. This allows users to view security and firewall policies. The second interface is called Business Direct, which allows users to manage their protection services and view and print reports. Both interfaces are quite intuitive and easy to navigate.
This service works by embedding firewall UTM functionality into AT&T's network infrastructure, which then provides highly secure connections that are fully managed by a specialized staff of AT&T security technicians. These professionals continuously screen applications and administer firewalls, intrusion detection signatures, filters, patches and servers 24/7 at the Security Network Operations Center.
AT&T provides its customers with the AT&T Managed Security Services Welcome Package. This provides explanations of the various security teams and their role in the process of setting up and maintaining the service, contact information and various guidelines.
The company provides support via various SLAs.
With a cost starting at around $1,000 per month, based on customer needs, we find this service to be an average value for the money. While the service does provide full firewall protection without the need of equipment, it takes some real-time control out of the hands of an administrator while they wait for change requests to be filled.