Network & Security
Network & Security offers a default security Access Control List (ACL) based on NSX, which acts as a powerful access control mechanism for Virtual Private Clouds (VPCs).
Furthermore, it boasts a Content Delivery Network (CDN) service with extensive coverage worldwide. This strategically distributed CDN ensures efficient and localized content delivery to end-users across the globe, reducing latency and enhancing the user experience.
Moreover, AVM Cloud reinforces its security capabilities with Virtual Firewall features, Global Load Balancing, and Web Application Firewall (WAF) services. The Virtual Firewall empowers clients to set up and enforce fine-grained network security policies, safeguarding VPCs from unauthorized access and potential threats.
Public IP
For customers whose applications necessitate access to the public internet and a public routable IPv4 address, they have the option to specify the quantity of IP addresses required. It's important to note that IP addresses are allocated dynamically to each tenant from the available IP pool maintained by AVM Cloud. Additionally, each virtual machine (VM) will be allocated a private IP address following the RFC1918 standard.
Content Delivery Network
AVM Cloud subscribes to a CDN (Content Delivery Network) services that spans its’ coverage around the world with the capabilities to provide content locally to its’ users.
This is specifically useful for customers who run a website or mobile application that’s likely to be requested by more than one user at a time from multiple locations.
Kiwisyslog Server
Customers who need to monitor their devices, such as servers, switches, firewalls, and routers, AVM Cloud’s Syslog Server offers a simple solution for collecting and viewing to ease syslog messages analysis. Our Self-service Syslog service allows customers to easily setup and capture syslog messages and store them in a centralized location, providing a unified view of system events across customers' network, whether it is within AVM’s VPC or customers' on premise servers.
Fortigate Firewall (Virtual)
Fortigate Firewall creates an impeccable firewall to protect customer’s infrastructure within AVM Cloud. The virtual edition firewall is presented as a first line protection from the outside world. For added protection, customers can opt to have multiple firewalls to create segments within their infrastructure to increase the protection.
SSL VPN
For administrators and users to connect to their VPC remotely and securely, each VPC will need to subscribe to SSL VPN services that provide a VPN gateway from anywhere in the world to connect to the resources within their VPC securely.
NSX Edge for VPC Gateway
This is a mandatory service for each VPC subscription. This gateway service provides NAT, routing and networking services that connect networks within the VPC to networks outside of their VPC.
AVM V-LB
It is part of the services from the software defined network within the virtualization layer. This add-on service is for the edge gateway to provide additional services for local load balancing. Customers who may have multiple instances of the same service within their own VPC can make use of this basic load balancer to distribute the load to the services among the servers.
AVM V-GSLB
AVM Cloud deploys a multi-zone load balancer that can direct traffic between KL and Cyberjaya data centres based on customer’s requirement.
AVM WAF Essential
Web application firewall service that filters, monitors, and block malicious HTTP traffic to and from a web service. This protects customers' business-critical web applications from attacks that target known and unknown vulnerabilities.
Deep Security & Agent-Based Anti-Malware
AVM Cloud is an operator of PAAS which includes management of services up to the OS level, including managing the security of the OS from patching it to protect against vulnerability or malware. Customers have the option to select this service to protect their infrastructure with a state-of-the-art security software.
AVM CA
AVM Cloud acts as the private trusted entity that is used to distribute Certificates that can be used to authenticate servers during communication. Alternatively, customers can create their own private trusted entity that is used to distribute certificates.