To ensure the highest levels of information systems and data protection, management, and compliance, Extreme Networks’ ExtremeCloud IQ cloud platform conforms to ISO / IEC 27017 and is certified by DQS to ISO / IEC 27001 and ISO / IEC 27701 by the International Standards Organization (ISO).

Extreme Networks takes threats to the availability, integrity, and confidentiality of our clients’ information seriously. Extreme Networks is the first major cloud-managed networking vendor recognized by the global standard for commitment to information security management systems best practices and controls.

Extreme Networks’ Cloud Services are hosted within Amazon AWS (Amazon Web Services), Google, and Microsoft data centers, taking advantage of AWS, Google, and Microsoft security and compliance capabilities at the data-center layer. Extreme Networks takes additional measures to secure our cloud-based applications, including:

• Firewalling, to control and protect inbound and outbound traffic
• Threat detection, with continuous monitoring for malicious and unauthorized behavior, including unauthorized system access and brute-force attacks
• DDoS-attack prevention and flow control with industry-leading tools
• Staging all ExtremeCloud IQ releases and patches with continuous penetration scanning for application vulnerabilities, to prevent any issues prior to actual deployment in production
• Industry-standard OS hardening processes for production server deployment
• Daily backups of production-network data, and storage of backups in an encrypted state
• Securing access to the underlying computing infrastructure with features like VPC, NAT, TLS encryption, reporting tools and automated password protection
• Strictly limiting access to the cloud infrastructure to a small number of designated Extreme Networks DevOps engineers
• Monitoring and tracking DevOps-personnel activities in the cloud environments, with a server/application audit trail.

For added security, our cloud networking solution also encrypts the data traffic while in transit between a customer’s site and the RDC (regional data center) containing the customer’s ExtremeCloud IQ Public Cloud instance. The RDCs do not collect or retain any data traffic generated on the customer networks.