Initial installation and ongoing management of SSL certificate and related intermediary files. This service includes the provisioning of an SSL certificate through IT-CNP’s commercial partner SSL certificate authority, logistics associated with getting the SSL certificate request issued and installed on customer and IT-CNP infrastructure tools, including customer’s web servers, application servers and GovDataHosting Managed Reverse Proxy service.  

Basic and advanced set of computing resource, storage, database, and application performance monitoring services to accommodate the most demanding enterprise application performance requirements.

Install vendor-provided patches for most of vendor supported and government authorized applications and open source products such as Microsoft, Red Hat Enterprise Linux, Oracle, Apache and many more. Basic service offering includes installation of Microsoft or RHEL operating system patches, while the advanced offering includes patch installation for over 250+ applications.

Database installation, configuration, security compliance benchmark hardening and quarterly patching service. Support is available for Microsoft SQL Server, Oracle and MySQL database management systems. DISA STIG and CIS database hardening benchmarks are available. Database administration tasking outside of the standard definition of Basic and Advanced Database Administration service type is not included in the scope of support, but may be available as a customer-specific support scope.

Service supports Microsoft Windows Server and Red Hat Enterprise Linux operating systems based on customer provisioned CPU, memory and disk resources. Service is limited to managing up to 10 privileged user or service accounts. Charges may apply for management of additional user/service accounts. 

This service provides GovDataHosting customers with a peace of mind that their data is periodically backed up and available for a restore if needed utilizing GovDataHosting Cloud Platform backup infrastructure. Depending on operating system utilized by the customer, our backup infrastructure is capable of restoring single files instead of having to restore an entire server to recover a single file. Managed backup and restoration services is available with a variety of incremental and full back up retention options. 

Managed Domain Name System Security Extensions (DNSSEC) service provides customer-system oriented domain name resolution services through GovDataHosting Cloud Platform redundant DNS server architecture. The purpose of this service is to provide protection against common vulnerabilities in the DNS protocol. 

Managed Reverse Proxy Service provides basic self-defending reverse proxy, traffic load-balancing and web application firewall (WAF) service utilizing GovDataHosting enterprise reverse proxy infrastructure. This IP rule-based service serves as a cost-effective alternative to dedicated reverse proxy/load balancing/WAF solutions. Service is limited to utilization of GovDataHosting Cloud Platform enterprise reverse proxy infrastructure. Customer-dedicated reverse proxy/load balancer/WAF support requires a custom scope of work and on-going support. 

Encrypted virtual private network (VPN) remote access connectivity with 2-factor RSA authentication for privileged and basic users requiring administrative access to virtual servers utilizing GovDataHosting enterprise VPN access devices and the latest government FIPS approved encryption protocol with proper encryption key length. Customers do not have to have a dedicated VPN device to provision this service and can leverage the GovDataHosting VPN remote access infrastructure as a cost-effective alternative to a dedicated solution.

GovDataHosting edge and internal enterprise Firewall Service acts as the first layer of defense against un-authorized connections. To minimize vendor-dependent vulnerabilities, GovDataHosting enterprise Firewall Service is delivered utilizing multi-vendor firewalls. Management of inherited or dedicated network firewalls includes setup of deny all/allow by exception firewall traffic filtering rules based on port, protocol and service.  All customer firewall configuration changes are required to be authorized by customer prior to implementation.