Advantage Educational Solutions
utilizes some of the most advanced technology for Internet security available today. When you access our site with Microsoft Internet Explorer versions 5.0 or higher, Secure Socket Layer (SSL) technology protects your information using both server authentication and data encryption, ensuring that your data is safe, secure, and available only to registered Users in your organization.
Advantage Educational Solutions provides each User in your organization with a unique user name and password that must be entered each time a User logs on.
Advantage Educational Solutions issues a session "cookie" only to record encrypted authentication information for the duration of a specific session. The session "cookie" does not include either the username or password of the user.
Advantage Educational Solutions does not use "cookies" to store other confidential user and session information, but instead implements more advanced security methods based on dynamic data and encoded session IDs.
Advantage Educational Solutions protects your Data through several security measures, including dedicating a team of employees to security and using various third party and proprietary security technologies. Please view our current security data sheet located in the Services section of our website, which is governed by the terms and conditions of this Agreement.
Application Security
All content on the Advantage servers is managed by an ISAPI filter that guarantees user level and obscures the inner workings of the system. The filter will not allow normal URLs to be processed by the IIS web server.
- Secure Sockets Layer (SSL) communication
-
All use of the administrative interface is encrypted.
- Username/password restricted access
-
The user database and authentication is intrinsic to the CMS, so no external authentication systems are required. Authentication can be optionally checked against an external source such as an LDAP server.
- User account expiration
-
A great feature for freelance users since the account can be optionally set to automatically expire, but be easily renewed by the account manager at your company.
- User login profiling based on time, time zone, ip, etc. with alerts
-
The system locks out accounts upon repeated failed login attempts, and sends email to the client administrator account.
- Full user activity logging/accountability within application
-
A complete audit trail of system usage is stored with reports and report filtering to help pinpoint CMS usage.
Network Security
- Firewall -
Limits all incoming and outgoing traffic to specific addresses and ports.
- Network Intrusion Detection
-
The system is continuously monitored for cracking attempts. All connection attempts are logged and system administrators are paged if abnormal activity is detected. Data logged can be used to identify the attacker and stop current attacks and prevent future attempts at compromising the system.
- SFTP, Leased Lines, and VPN restricted access to servers
-
As an option, Advantage Educational Solutions can accommodate several data transmission security systems. For public sites, this is not necessary, since the data is going live anyway, but for extranets and intranets we can accommodate these security schemes.
- Full time IT staff monitoring
-
Patches are proactively tested, applied, and updated. For example, we had patched for Code Red two weeks before it hit the net. A separate server is maintained for testing of new security patches since the patches occasionally cause other system failures.
If you have any concerns or questions regarding Security please email : support@IEPadvantage.com
|