Cupertino, California – (The Hosting News) – June 28, 2006 – According to Blue Lane Technologies Inc., Ornis, one of France’s leading ASPs, is the first French Hosting Provider to deploy the Blue Lane PatchPoint system as a standard inline patch proxy solution. The solution was deployed to address the increasing number of major vendor application vulnerabilities threatening the security and uptime of the 500 business critical servers within the data center and hence the businesses of its customers’ themselves.
As a leading ASP in France providing network and IT facilities management solutions to more than 1,000 corporate customers and coverage extending to more than 4,000 websites, Ornis’ challenge is to ensure that all its servers are always available. As the major application providers — Microsoft, Oracle, Red Hat, etc. — continue to step up the number and frequency of major new security patches and hence critical application vulnerability announcements, Ornis is continuously faced with the ”patch now or patch later” dilemma, each with its own set of risks and consequences.
Ornis believes that if it immediately deploys the vendor patches without testing, the ASP risks potential disruption to the servers and downtime not only of business, but also to customers. If Ornis waits until the patches can be tested, the company risks the threat of an attack or exploit upon the application vulnerability which could also bring the businesses down. Until the Blue Lane PatchPoint system, there were no alternatives.
Jean-Marie Labeyrie, COO of Ornis explained, ”When dealing with servers that must always remain available and for which no pre-production test environment exists, how do you keep those servers updated with the latest security patches? That’s been the dilemma faced by Ornis, which specializes in hosting online business applications. Our business is to industrialize corporate services within an ASP model.”
There are over 500 servers that host its clients’ critical applications: Sylvain Mouly, Assistant CTO of Ornis offered, ”Server maintenance is highly critical, especially when it comes to applying security patches. However, we’re hosting very critical applications, such as those used for Marcel Merieux Laboratories. Such services cannot be interrupted or suffer from disturbances resulting from an unsuitable patch.”
For a long time, none of the many patch management solutions tested by Ornis successfully addressed the real problem: ensuring the servers’ total availability, even when an unstable security update is installed or if a patch requires the system to be restarted. Mr. Mouly continued, ”When Cortina, a Blue Lane Integration Partner in France, first came to me with the PatchPoint solution, I was skeptical since it seemed miraculous. A proof-of-concept was quickly implemented on a few unpatched servers. We then tried to exploit known vulnerabilities on ‘protected’ servers, but the PatchPoint patch proxy prevented us from doing so, just as if the patch had been installed within the machine.”
The company then decided to deploy two PatchPoint G/450 Gateway appliances in front of all its server farms. Mr. Mouly added, ”It was easy to install the patch proxy, since it detected the machines, their operating systems, and their applications almost automatically. Now, instead of applying security patches in a hurry, we can just let the patch proxies protect the machines until the next scheduled maintenance. Blue Lane allows us to reintegrate security patches seamlessly as part of a normal maintenance strategy.”
Pascal Orset, Co-founder of Cortina, concluded, ”Our clients are up against two enemies: threats and time. One of the key benefits of the PatchPoint solution is that operating teams can regain time that has slipped away from them in the fight against these threats.”
One of France’s leading ASPs, Ornis provides network and IT facilities management solutions to more than 1,000 corporate customers and coverage extending to more than 4000 websites.
According to Blue Lane Technologies Inc., it provides the industry’s first inline patch proxy for enterprise servers that fixes application-specific vulnerabilities at the root cause by checking for the same conditions and applying the same corrective action as the software vendor security patch. Solving the dilemma of ”patch now or patch later,” the Blue Lane PatchPoint System instantly secures critical applications and preserves the uptime of the business while eliminating the cost and risks associated with unscheduled patching. Founded in 2002, Blue Lane is headquartered in Cupertino, California.
To learn more about Blue Lane Technologies, please visit: www.bluelane.com.
For more information about Ornis, please visit: www.ornis.com.