User
Password  
  Technology
   $75 million has been invested in the Internet Data Centre which is housed in an 80,000 sq. ft. View Tour
TECH-SPECS

Our managed servers are designed to eliminate all single points of failure. Our Internet gateway is made redundant through the implementation of BGP4 (Border Gateway Protocol), which ensures that multiple T3 connections are always available and, in the event that one goes down, the other will seamlessly pick up the slack. Cisco routers are made redundant through the use of HSRP (Hot Swappable Router Protocol), which guarantees that our network will never skip a beat. Utilizing load-balancing hardware designed for fail over in the event of a fault, we guarantee our clustered servers will always remain up and running 99.9% of the time.

Experienced staff monitor these systems 24/7.

Cisco HSRP (Hot Swappable Router Protocol) ensures router redundancy. Our server cluster uses multiple load-balancing hardware with automatic fail over. RAID (Redundant Array of Independent Disks) storage technology lowers the risk of failure, and improves fault-tolerance by expanding data capacity and spreading data across multiple disks.

Data integrity and speed are assured by Network Appliance Filers using RAID5 storage technology. A Redundant Array of Independent Drives (RAID) accomplishes this by copying or "mirroring" all data onto offline drives. If an online drive fails, another identical drive brings itself online to ensure the availability of its data. Backups of all data are routine, automatic and kept on-site. These backups are duplicated at two state of the art, world-class data centers that are geographically separated. {PICTURES} All of our data centers are climate controlled, maintain extensive backup systems and employ top of the line physical security measures.

Please note Coldfusion (.cfm), Miva and ASP (.asp) services are hosted on a closed source platform. The 99.9% guarantee does not apply for these services.

A seamless blend of UNIX and Microsoft™ technologies Our technology combines the functionality of "Windows™ hosting" and "UNIX hosting" onto one platform. You can run ASP/MS Access and PHP/MySQL based sites from the same server farm. With our seamless blending of UNIX and Microsoft™ technologies, SO HOST ME's hosting system is truly "cross-platform and one of the most advanced in the industry.

Scale to an unlimited number of domains on redundant servers SO HOST ME's architecture and infrastructure was designed and built from the ground up to scale to an unlimited number of domains. These domains are hosted on multiple redundant servers, which are clustered using load-balancing hardware.

Take advantage of our BGP4 technology Multiple redundant Internet connections, currently provided by UUNET, LOOK Communications, Telus and Sprint, are implemented through the use of BGP4 (Border Gateway Protocol). We monitor and upgrade bandwidth as needed.

SO HOST ME employs multiple routers and load balancers Our multiple routers are made redundant through the use of Cisco's HSRP (Hot Swappable Router Protocol). Our server clusters use multiple load balancing hardware, designed for failover in the event of a load balancer fault, which gives us 99.9% Uptime Guarantee!

Network Appliance filers assure speed and data integrity Data integrity and speed are assured by multiple Network Appliance Filers using RAID technology. Three back up systems are in place; one is on-site and two are off-site at geographically separated data centres. The systems are continuously monitored for reliability and performance by our NOC staff. Our new state of the art data centres are protected through electrical power backup, independent air conditioning units and physical security measures.

Symantec™'s virus protection service scans your Email for Viruses SO HOST ME's applies Symantec™, a world-leader in Internet security to provide virus scanning for your email accounts. Email Virus Scan virus protection service from SO HOST ME secured by Symantec™ provides a powerful solution to protect your email against viruses. By utilizing all of Symantec™'s key anti-virus technologies including Bloodhound™ for heuristic detection of new or unknown viruses, Email Virus Scan will significantly reduce the chance that your email account will become infected as the result of a virus, worm or Trojan Horse.

Data centre facility SO HOST ME uses four North American points of presence, its main one being a state-of-the-art 80,000 sq. ft. Intelligent Internet Data Centre. The centre provides the ultimate in security, reliability and technology.

  A World Class Capital Facility - $75 million has been invested in the Internet Data Centre which is housed in an 80,000 sq. ft. (7,432 sq. meter) building, to be expanded to 150,000 sq. ft. (13,935 sq. meters) of hosting solutions floor space, with the capacity of more than 35,000 servers.
  Clustered Server Environment - SO HOST ME's Web server clusters are bundles of hardware, operating systems, and applications, integrated to host and serve business-critical web applications to users worldwide. Hostopia ensures that the hardware, software and network infrastructure to support websites is robust enough to handle the peaks and valleys of customer demand.
  Environment - The facility has a strictly controlled dust and pollution free environment. The climate control system maintains a consistent range of between 13-21? C (55-70? F) and humidity at 40 to 60 percent in a static-free facility. The entire facility has raised flooring.
  Physical Security - The Centre provides top-level 24x7x365 perimeter security including video surveillance, biometric and card-key access and 24-hour on-site security.
  Fire Suppression - The Centre has a state-of-the-art smoke detection system with the ability to scan even the smallest (up to 3PPM) particle in the air.
  Connectivity - The Internet Data Centre contains a robust reliable and high quality network. It operates on a SONET ring, diverse redundant fiber-optic network connections with a capacity capable of OC-192 (10 Gigabits) connected by the latest switching and high-speed routing equipment.

Perimeter security via multi-tiered firewalling SO HOST ME servers are protected with software-based firewalling. These look at source and destination addresses, and source and destination ports. Security administrators handle all aspects of firewall management. Our engineers are familiar with many types of firewall applications, including CheckPoint, ipchains, ipfw, ipfwadm, etc. We are able to modify response packets with masquerade responses to the remote initiator. Our systems are secured using the latest security methods including router access list filtering on inbound carrier feeds and firewalling at the SYN level on internal devices.

Monitoring security systems and processes All security systems are tested on a monthly basis. Security scanners include Nessus, (www.nessus.org), and SAINT, (www.wwdsi.com/saint). Automatic updates are instantly made with the latest exploit/DOS, (Denial of Service), check codes. This provides us with an accurate and detailed report on systems. Security team are also subscribed to all the major security mailing lists, including BUGTRAQ from securityfocus.com. These lists provide access to the latest security information, which enables new patch installation within hours of discovering new exploits.

Intrusion Detection A number of intrusion detection applications such as TRIPWIRE are also used, along with BLUEGENESIS proprietary monitoring and logging systems. These systems notify security response teams during scans and potential DOS attacks. ACLs are modified as needed. In certain cases rules are implemented automatically during detection.

All suspicious activity is logged hardcopy directly to a printing station which is monitored closely. This ensures there is no tampering with conventional softcopy logs.

Anti Virus Measures Our systems are protected against viruses by extensive built-in access controls. Regular users are unable to access or damage system files.

Offsite Backups Automated offsite secure storage backups to our mirrored storage arrays in the southern US are conducted through secure encrypted tunnels using SSH with confidential data encryption prior to transit.

Disaster Recovery Procedure Our disaster and recovery site is currently located in the South Eastern United States. This site is for the sole purpose of emergency fail over. This NOC is capable of handling all traffic in case our eastern operations is interrupted.

Recording and determining access to data Every employee with access to internal computer interfaces that includes customer data is assigned a unique username, ID number and password. Access to customer data is restricted based on the responsibilities of each employee. Each user is assigned an appropriate access level. Employees are only granted access to information that is essential for them to efficiently perform their job requirements. The actions of each individual on the computer system are recorded and logged by employee ID number.

Our practices regarding the protection of customer information are captured in our Privacy Policy. The Privacy Officer is responsible for ensuring the responsible management of all customer information.

Printed documents that include sensitive customer information are protected in locked file cabinets. An access control system that uses key fobs restricts access to server rooms and programming areas. Individuals are granted access to these areas only if it is essential for them to effectively perform their responsibilities.

Passwords All passwords must be changed from vendor-supplied defaults upon initial use. To ensure the effectiveness of security parameters, we recommend a combination of uppercase letters, lowercase letters, numbers and symbols for each password. Employee passwords are regularly tested to ensure that they are not easily compromised.

Secure Server Details We are using Linux-based Apache with 128 bit SSL encryption.

Offsite secure storage is performed at both of our remote NOCs. These backups are done through secure encrypted tunnels using SSH, with confidential data encrypted prior to transit.


Multiple T3 Connections on Diverse Backbones
99.9% Uptime
Award Winning Site Management Tools
24/7 Network Monitoring
24/7 Technical Support (Windows®
& Unix)
Totally Redundant Platform

All about security at sohostme.
Sales and Business Development :
514-293-SOHO (7646)
sohosme.com © 2003
Terms Of Use
With features such as File Manager, Site Promotion Tool, Web Statistics, EasySiteWizard, and EasyMail.
Contacts   |   Support   |   FAQ   |   Terms of use