Thinc

Sonicwall Managed Firewall Services

Sonicwall Managed Firewall Services from Thinc provide certified firewall engineers to configure and maintain Sonicwall firewalls to protect your organisation.

The service provides initial set-up, installation, monitoring, reporting and ongoing management.

Features

• Advanced protection for public and private cloud infrastructure
• Real-time breach detection and prevention capabilities
• Content filtering and blocking e.g. web sites
• Service provided by accredited Sonicwall engineers
• Fully managed service, including vendor support and account management
• Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Intelligence
• Real-time deep memory inspection (RTDMI)

Benefits

• Flexible licensing
• Analytics and reporting
• Reduce time managing firewalls
• Reduce CapEx spend
• Automated breach prevention
• Zero-day protection
• Deployed to a wide variety of private/public cloud use cases

£295 a unit a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at accounts@wearethinc.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

502670985494566

Contact

Richard Stathers
0808 168 8922
accounts@wearethinc.com

Service scope

• Service constraints: None.
• System requirements: An internet connection

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Standard support hours are Monday to Friday 8:30-17:00. Extended support is available.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Proactive and reactive support services are provided. Thinc can also interface with 3rd parties for support, acting as a service integrator. Services include monitoring, capacity management, patch management and regular service reviews.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Thinc use a three step enablement methodology. Please refer to the Service Description for more details.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: A rule export can be provided.
• End-of-contract process: At the end of the subscription for the firewall license will lapse. A rule export is provided at no cost.

Using the service

• Web browser interface: No
• API: No
• Command line interface: No

Scaling

• Scaling available: No
• Independence of resources: Regular service review consider capacity and utilisation to ensure appropriate sizing.
• Usage notifications: Yes
• Usage reporting: Other
• Other usage reporting: Via the account management team.

Analytics

• Infrastructure or application metrics: Yes
• Metrics types: Network
• Reporting types:
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Sonicwall

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Backup and recovery

• Backup and recovery: Yes
• What’s backed up:
  • Configuration
  • Rule set
• Backup controls: Backups are managed by Thinc.
• Datacentre setup: Multiple datacentres
• Scheduling backups: Supplier controls the whole backup schedule
• Backup recovery: Users contact the support team

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Availability is based on the requirement and architecture chosen. SLAs are aligned to the availability design.
• Approach to resilience: Availability is based on the requirement and architecture chosen. SLAs are aligned to the availability design.
• Outage reporting: Dashboard based alerts are available.

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: A variety of two-factor authentication is used to restrict access.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password
• Devices users manage the service through: Dedicated device on a segregated network (providers own provision)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: Cyber Essentials

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials
• Information security policies and processes: Security Reporting to Board level. Policies and processes have defined review cycle.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Components are tracked through their full life cycle from implementation to decommissioning. Changes are reviewed prior to implementation to assess for potential security impact.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Depending on the solution chosen, scanning is built in to the managed service. Security patch scheduling is based on vulnerability assessment.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Proactive monitoring is in place to provide early warning. Escalation procedures are in place to respond to incidents quickly.
• Incident management type: Supplier-defined controls
• Incident management approach: ITIL aligned incident management processes in place. End users report incidents via email or telephone. Incident reports are provided on request.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: No

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: If Microsoft Azure is used.

Social Value

• Social Value:

  Social Value

  Fighting climate change

  Fighting climate change

  We review the impact of data centers used to deliver services, aligning ourselves with low carbon and carbon off setters.

Pricing

• Price: £295 a unit a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Demonstration license

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at accounts@wearethinc.com. Tell them what format you need. It will help if you say what assistive technology you use.