Public IP describes our product grouping which connects you to the Internet and optionally protects your internal network with a central Managed Firewall.

Internet

A premium quality gateway service that connects your sites to both local Internet destinations on our network and to destinations on the greater Internet via un-restricted peering points maintained with our national and international carrier partners.

Managed Firewall

A fully managed firewall service for your exclusive use created virtually within the Pacific Wireless network and configured to your specification to secure your internal network from unwanted traffic and untrusted networks.

Why have it?

The Internet has become an important means of communication for most of today’s businesses. However, for many it has become much more than that, with sophisticated organisations using the Internet to conduct mission-critical internal and external business functions.

The Pacific Wireless Internet service offers a high availability with low local, national and international transit times to support time-sensitive applications for those organisations that demand it. This is combined with a range of flexible billing and configuration options to best match your specific business activities and give you outstanding overall value when second best just won’t do.

Every network connected to the Internet or other untrusted network should be protected from unwanted data and unauthorised access. The purchase, installation, configuration, maintenance, replacement and licensing of customer premises-based firewalls is expensive, time-consuming and non-core for most businesses.

The Pacific Wireless Managed Firewall offers you the best value access to a high-spec, highly available, carrier-grade firewall with industry-leading performance and the latest technology.

Why is it the right choice?

	Internet		Managed Firewall
	Un-restricted, high-performance, high-availability Internet		Security from the Internet and other untrusted networks
	Bandwidth is only limited by the data rate of your access circuit or your chosen unlimited rate		Secure your network without the high cost of premises-based hardware
	Multi-homed to leading upstream providers with BGP routing providing automatic redundancy		Allows remote access from any Internet connection for teleworkers using supplied IPSec PC client software
	Multiple, flexible billing options to best suit your business		Security from partially-trusted networks within your VPN
	Multi-service bandwidth allocation available via port rate limiting		Secure your Internet on a one-firewall-per-site basis or one firewall for the whole VPN
	No charges for Pacific Wireless-to-Pacific Wireless (on-net) traffic in Victoria		Allows Internet and VPN to be provided to you across a single Ethernet access port
	Unrivalled visibility via C.O.N.S.O.L.E. customer portal		Carrier-grade firewall performance and availability
	Pacific Wireless is an active member of APNIC		Certified by the ICSA for firewall tasks
	A range of DNS hosting and Secondary Mail services available		No known security advisories issued

How do I get it?

For Internet, your sites need to be connected to the Pacific Wireless network in Victoria with either the Wireless Connect access method or DSL Connect. Interstate sites can also be serviced via our national partners. Managed Firewall is available for Wireless Connect sites and for VPNs.

Internet services can be delivered to the same site alongside other data and voice services when using the Wireless Connect access method, each one being provided its own, secure virtual connection. Or alternatively, by adding a Managed Firewall, your Internet can be made available to all sites on your Pacific Wireless VPN securely alongside your VPN service and on the same access method.

How does it work?

Pacific Wireless operates an ‘Internet layer’ across its network to allow you to connect with maximum efficiency to the Internet. Our Internet layer is made up of an Internet router at each tower site, these routers being directly connected to one another via more than one path. This means that any traffic passing between tower sites takes the shortest path, rather than having to go back to a central location first. It also means, that in the unlikely event of a problem on one section of the network, traffic is automatically re-routed to ensure no loss of service.

All tower site routers are also directly connected to our modular, high-availability ‘border’ routers, which act as gateways to other Internet networks. The routers not only run the industry-standard BGP protocol for redundancy with multiple upstream providers, but also run data accounting software to record the amount of data passing to and from the greater Internet. This software is highly accurate and also ‘flow-based’ so that it can measure the traffic passing for each IP address, port and protocol. The output from this software forms the basis for the analysis possible from within C.O.N.S.O.L.E.

Each Managed Firewall is your own partition within our carrier-calss network firewall which consists primarily of an ordered list of rules. These rules consist of "matching criteria", used to evaluate the packet headers to determine if a given rule should be applied to a particular packet, as well as a set of action criteria, used to determine what should be done with the packet.

You tell us how what traffic should be permitted to pass and what should be refused access to your private network. We provide a simple form for you to complete with a default configuration as a starting point common to most businesses.