SECURITY
Cabestan's production, routing and hosting platform is high-performance and extremely secure.
Cabestan is committed to providing a trustworthy environment, in which all services are optimally assured and are appropriate to the business of managing email and SMS campaigns.
Restricted access to the platform
Access to machines is restricted and only technical Cabestan teams are authorised to work on the machines located on host premises. All our applications are secured using dedicated flow type firewall boxes. The platform has an anti-intrusion detection system (IDS) that enables any potential attack made on the Cabestan IT system to be countered. Cabestan applications are completely SSL (Secure Sockets Layer) secure. All data is protected with 128-bit encryption when used within Cabestan applications and on the Internet. The authentication system blocks access to the applications following three failed connection attempts. It then logs the connection parameters for the IP address and alerts the teams at Cabestan.
Controlled security policy - External intrusion audit
Every year the entire platform is subject to external intrusion audits by third party service providers not associated with Cabestan. Cabestan's security policy requires that an internal system audit is also carried out; this automatically searches for errors and ensures that software versions are always up to date.
The platform is subject to 'application' audits. These can verify that all developments are secure and suited to the web environment (anti-Cross-site-scripting, anti-SQL-injection development protocol etc).
Data confidentiality
Complete data confidentiality and integrity is guaranteed by the Cabestan technical environment.
High application availability
High availability for our applications is assured through complete redundancy for all our hardware and for the platform.
A 'Failback' platform has been installed, enabling all web services to be maintained in the event of the platform being isolated from the production centre.
The web production environment is protected from service interruptions by the inclusion of a cache system for the central information system, which keeps the service active.
All web server farms for front- and back-office systems are load balanced by means of dedicated F5 load balancing boxes.
High availability of the Microsoft SQL Server databases is assured by latest generation HP clusters in a SAN environment.
Data backups
The data backup system is assured by a dedicated backup network that is automatically controlled, so that data is stored and archived on tape going back several months. Data is also archived offsite.
Dedicated human resources
Platform monitoring is carried out in real time, 24/7, by both our own teams and our host's technical teams. The monitoring system is operated using NAGIOS tools located both within and outside the production platform.
High platform performance
A reverse proxy system has been installed to ensure that hosting is performed under conditions that are optimised for situations involving email and SMS campaigns (burst effect, display acceleration) and all media elements.
Our highly robust capacity for sending multiple millions of messages per hour is assured by means of dedicated applications in an IronPort Cluster configuration. These applications are controlled by a cluster of heavy-duty servers designed for generating email and SMS content.
Our resources management policy is relies upon our being able to maintain these at 70% of their functional capacity (optimum mode) and being able to use our architecture flexibly to guarantee high and effective levels of scalability, with complete transparency for our end users.
