Wavenet

Managed Firewall

Wavenet’s Managed Firewall Service provides installation, proactive maintenance and management with flexible service options. Partnering with leading security vendors, Wavenet supports secure infrastructure, application and data deployment across hybrid and multi‑cloud environments. Services span co‑managed to fully managed, including design, deployment, monitoring, maintenance and management to meet diverse security needs.

Features

• Next-Generation Firewalls including IPS, Anti-Virus, Web filtering & Application Control
• Operational Event Monitoring
• Incident Resolution
• Change Implementation
• Device Patching
• Remote Technical Advice
• IPS Policy Management
• Project, design and implementation services
• Security Reporting and Policy Tuning

Benefits

• Advanced firewall with IPS and threat protection
• Seamless installation and secure onboarding
• Proactive maintenance and regular patching
• Flexible co-managed or fully managed service
• Continuous operational event monitoring
• Immediate expert remote technical support
• Rapid incident resolution to reduce downtime
• Secure and compliant change management
• Security reporting and policy optimisation
• Partnerships with top security vendors

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@wavenet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

274579287975961

Contact

Joe Ewins
0333 234 0011
publicsector@wavenet.co.uk

About your service

• Service categories:

  Systems Infrastructure Software

  Security

  Network security

  • Trusted network access and protection
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: During the design phase, any customer-specific limitations will be uncovered, as there are no known constraints at present. This flexible approach allows us to tailor our solutions to meet the unique needs of each individual customer, ensuring optimal functionality and satisfaction. By remaining open to potential limitations as we progress through the design process, we can proactively address them and develop a final product that exceeds expectations.
• System requirements:
  • Suitable hardware and licensing if not included in the solution
  • Exact requirements will be uncovered during the design phase.

User support

• Email or online ticketing support: Yes
• Support response times: Wavenet offers varying levels of assistance. Generally, Wavenet support a 1-hour response time during core working hours from 9 a.m. to 5 p.m., Monday to Friday, UK time. Extended and 24x7 hours support is also available at additional cost.; For more information or to discuss your specific needs, please contact Wavenet.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Essentials:; Designed for customers who want to manage their own environment yet have access to skilled technical resource for ad-hoc assistance where required; Enterprise:; Designed for customers wishing to co-manage their environment with Wavenet, adding monitoring and event management; Enterprise Plus:; Designed for customers requiring a fully managed service, safe in the knowledge that their environment is being monitored and managed by Wavenet’s experienced engineers. Includes incident and problem handling, plus change and patch implementation
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: A Wavenet Consultant will work with the business to achieve the business goals and compliance requirements. They will then design, implement, test and deploy the solution. Provide onsite, online training where applicable and produce bespoke documentation.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Where technically possible, Wavenet will work with the customer to allow the full export of data from the application. Data extracts can be requested at any time during the contract. The data extract can be requested via a service request.
• End-of-contract process: The end-of-contract process for SD-WAN typically involves these steps:; ; Notification: Notify Wavenet of contract termination and specify the end date.; Review Contract Terms: Review contractual obligations regarding data retention, termination fees, and post-contract support.; Data Backup: Ensure all critical data stored within the SD-WAN solution is backed up securely.; Prepare Equipment: If hardware is involved, prepare it for return according to the vendor's instructions.; Terminate Services: Coordinate with Wavenet to terminate services on the agreed-upon date.; Data Extraction: Extract any necessary data and configurations from the SD-WAN solution before service termination.; Post-Contract Support: Clarify any post-contract support arrangements or requirements with Wavenet, if applicable.
• Documentation accessibility standard: WCAG 2.2 A

Using the service

• Web browser interface: No
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: WCAG 2.2 A
• API: No
• Customisation available: No

Scaling

• Independence of resources: Resources are carefully calibrated according to the design and solution to effectively mitigate any potential impact on service delivery. This entails a meticulous alignment of available resources, with the specific requirements and demands of the designed system or solution.

Analytics

• Service usage metrics: Yes
• Metrics types: Monitoring Metrics are available
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Fortinet, Palo Alto, Cisco Meraki

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Options for exporting data in various formats, such as CSV files or standardised data feeds, ensuring compatibility with other systems or storage solutions.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: SLA is dependant on the purchased level of service, device selection and solution design
• Approach to resilience: Available on request
• Outage reporting: Email alerts are provided

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: Role-Based Access Control (RBAC); User Authentication; Least Privilege; Audit Logs
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Wavenet is an ISO27001 certified company and we adhear to the standard, we are audited on this standard annually, Wavenet is also a CE+ certified company
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Wavenet’s ITIL v3 aligned service management tool meets ISO 27001 guidelines, governing core ITIL processes including, but not limited to, incident, problem, change, release, configuration, service level management and service catalogue function
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Wavenet conform to and follow the NIST standard and ISO27002
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We have continual monitoring with EDR solution feeding into a SIEM that is monitored 24/7 that is monitored by SOC
• Incident management type: Supplier-defined controls
• Incident management approach: Wavenet is ISO27001 certified and we follow the playbook as part of our certification.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Public Services Network (PSN)

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 1%
• Between £500,001 and £1,000,000: 2%
• Between £1,000,001 and £2,500,000: 3%
• Between £2,500,001 and £5,000,000: 4%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: United Registrar of Systems
• ISO/IEC 27001 accreditation date: Thursday 18 July 2024
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: United Registrar of Systems
• ISO 9001 accreditation date: Monday 12 August 2024
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 39aabf05-4ab8-4ee7-adcd-3318af1f9d2f
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 6cc5c85d-03f1-446c-9e9d-7338dfb9f0ce
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Plans for positive actions with community groups.

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@wavenet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.