Services catalogue

Join more than 400,000 users who develop and evolve their applications thanks to our cloud-managed solutions.

Security

A certified hosting provider guaranteeing security and confidentiality of your critical data

Expertise

Architects, engineers and technicians to advise and support you to meet your needs

Dedicated platform

Deploy and manage your resources directly from our ITCare portal

Interconnections

Cegedim.cloud hosts more than 300 customer interconnections. We ensure the implementation of a secure and private interconnection between your environments and Cegedim network.

Physical link interconnection

Site-to-site VPN

These different interconnection media can be combined and deployed as primary and/or backup interconnection to ensure high availability of the links.

Managed supports

End-to-end interconnection management: deployment of own hardware/router, hosting of the solution, intervention of RUN teams, incident management.

  • Managed Dedicated Link Interconnection + Service Provider Link: Managed interconnection to the DC via dedicated physical link
  • Managed VPN Site to site 

Non-managed supports

Cegedim.cloud does not intervene on your equipment – unless specifically requested by the customer. We guarantee the availability of our equipment.

  • Unmanaged Dedicated Link Interconnection: Unmanaged interconnection to the DC via a physical link; the operator link is at the customer’s expense. Cegedim.cloud provides a secure interconnection to its network via VLAN, and the customer is responsible for bringing back his or her hardware.
  • Unmanaged VPN site to site

VPN for user

The VPN Ipsec user solution allows you to have a remote and secure access to your network. You can access all your resources from any remote location through a private, isolated and secure network.

User Ipsec VPN provides the following features:

  • Managed service: the deployment, management and maintenance of the platform are ensured by our teams
  • Secure TLS connections
  • High availability
  • Active Directory-based customer authentication 

Domaine name and certificates

Certificates allow you to secure your applications and sites exposed on the Internet by ensuring the encryption of data in transit between a user and a website. The certificate establishes a secure connection between the web server and the browser. Visitors then access your site through a secure connection indicated by a padlock icon and a URL beginning with the “https” protocol.

Cegedim.cloud deploys and manages SSL/TLS (Secure Sockets Layer/Transport Layer Security) certificates and offers several types of certificates:

  • Standard: issued for a single url
  • Wildcard : allows to secure an unlimited number of urls of a domain or sub-domain of your choice
  • Multi-Wildcard : unlimited number of urls for several domains and sub-domains on the same certificate
  • Extended Validation: offers the highest level of authentication
  • Let’s Encrypt: certificates generated by Cegedim.cloud and self-managed. These certificates are infinitely renewable.

Cegedim.cloud provides a managed service, from domain name provisioning to SSL/TLS certificate management:

  • Domain name rental
  • Purchase of certificates from certification authorities
  • Deployment and lifecycle management, including certificate renewal

Elastic Secured Endpoint

Exposed on the Internet, your applications are particularly exposed to the risks of cyber attacks: botnets, denial of service attacks (DDoS), intrusion, data leakage, etc. Through Elastic Secured Endpoint, Cegedim.cloud provides a complete set of technologies for securely exposing your applications on the Internet.

Elastic Secured Endpoint is a fully managed service by our team of security experts. We ensure the deployment, management and reporting of the solution:

 

    • Security and Performance of your applications :
      • Encryption/decryption of HTTPS streams
      • Intelligent traffic management and load balancing
      • Compression and cache management for maximum performance
      • Web Application Firewall (WAF) in option
    • Security Monitoring:
      • Real-time Cyber monitoring of exposed resources on the Internet
      • Weekly vulnerability audits
    • DDoS Protection:
      • Detection and protection against denial of service attacks
  • Security and performance

Cegedim.cloud load balancers (F5 BIG-IP LTM) provides a deep understanding of the network application traffic and control over how it is managed.
It transforms the chaotic volume of network traffic into logically assembled data flows. Then makes intelligent traffic management decisions, selecting the right destination based on server performance, security and availability.

BIG-IP LTM is a full-featured reverse proxy which allows to inspect, manage and report on your network application traffic. From basic load balancing to complex traffic management decisions based on client, server, or application status, BIG-IP LTM gives you precise control over application traffic.

The SSL acceleration achieved by BIG-IP LTM offloads servers from HTTPS encryption and frees up resources to improve application performance.

Optimized compression and caching management improves interactive application performance, data loading times, and bandwidth utilization.

  • Optimization of application speed and reliability
  • Improvement of infrastructure performance
  • Optimization of the user experience

Features:

Intelligent traffic management decision based on applications and server constraints

Flexibility (scalability of resources on demand)

Real-time analyses (continuity, response time, traffic increase, etc.)

Traffic encryption

Optimized TCP/IP

SSL offloading

  • Web Application Firewall

BIG-IP Application Security Management (F5 BIG-IP ASM) enables organizations to be protected against the 10 greatest OWASP threats, application vulnerabilities and zero-day attacks. With the combination of Layer 7 DDoS defenses, advanced detection and mitigation techniques. As well as dynamic learning, virtual patch execution, and accurate attack visibility, BIG-IP repels even the most complex threats before they reach your servers.

Benefits:

The most effective ready-to-use security

BIG-IP ASM simplifies policy creation, allowing you to quickly deploy a WAF and provide immediate powerful security. It also adapts policies through automatic learning to counter ever-changing threats hiding in (or targeting) http, https, and WebSocket traffic.

Detailed application visibility and reporting

Get detailed visibility into policy violations, potential attacks severity, and impact on servers. BIG-IP ASM also uses attack information and reports to identify threats, which become increasingly sophisticated as they evolve.

Fast vulnerability correction

BIG-IP ASM incorporates Dynamic Application Security Testing (DAST) tools to detect and correct vulnerabilities and unauthorized web changes before code fixes are available.

Market-leading performance and scalability

Ensure application availability, even under attack, and dynamically improve performance through application optimization and acceleration.

Features:

Protection against Layer 7 attacks

Detects and reduces application attacks, including DOS and DDOS, brute force, SQL injection, cross-site scripting, remote file insertion, cookie poisoning, and session hijacking.

Equipment identification

Tracks each visitor’s unique device ID across multiple IPs and sessions and through avoidance actions, for highly accurate blocking of malicious actors.

Proactive defense against robots

Identifies malicious bots that bypass standard detection methods and reduces threats with greater accuracy, before they begin.

Application Perception

By associating the application username with attacks, BIG-IP ASM makes it possible to block almost all attacks and better understand them.

Data protection and cloaking (anonymization of data)

Prevent leakage of sensitive data (credit card information, social security numbers) by completely eliminating data and masking the information.

Incident clustering and attack correlation

Automatically map multiple attacks into a single incident to improve visibility and facilitate management.

  • Cyber monitoring

XMCO Serenity is a non-intrusive service for detecting attack attempts and leakage of sensitive information. The service covers all resources associated with the company: IP addresses, domains, brands, names, etc. and detects vulnerabilities in a preventive way. Before they are exploited by hackers: image damage, identity theft, uncontrolled exposure of the IS, data theft and leakage, etc.

Features:

  • Vulnerability audits

Qualys Vulnerability Management is a cloud service that provides immediate and global visibility into the vulnerabilities of your IT systems. And protects you from them. You can identify threats and monitor unplanned changes to your network before they become vulnerabilities:

  • Scalable solution that provides comprehensive security coverage for all networks and equipment (internal network, remote or mobile sites, elastic virtual environments)
  • Low impact on IT teams in terms of deployment, management and use
  • Precise and prioritized results
  • Automated weekly scans
  • Ongoing supervision and analysis of reports

Features:

  • Easy to deploy:
    • No software to install or maintain
    • Immediate accessibility from a web browser
  • Global on-demand scalability and deployment from a public or private cloud
  • Continuous scanning, identification and prioritization of vulnerabilities:
    • Network mapping
    • Daily and automated updates of the vulnerability knowledge base
    • Completeness of reported information: description of the vulnerability, consequence and detailed solution
    • Corrective action management: automatic generation and verification of incident tickets, analysis of incident ticket trends and reports, simple instructions to eliminate risks
  • Intuitive and comprehensive reporting:
    • Management dashboard with global security status summary and instant access to remediation details
    • Graphical and trend reports for managers
    • Detailed reports with verified remediation actions for technicians
  • Constantly updated cloud solution: automatic feature enhancements with transparency for the user
  • Integration with other systems via API allowing direct integration with incident ticketing systems and Help Desk solutions
  • End-to-end encryption and powerful profile-based access controls to ensure the confidentiality of your security data
  • Detection and protection against DDoS attacks

Cegedim.cloud integrates into Elastic Secured Endpoint a detection and protection solution against DDoS attacks, including very high-capacity attacks, before they reach your network. This service provides multilayer protection (L3-L7), with cloud scanning technologies to detect, identify and prevent threats in real time. While routing legitimate traffic to your site. The fully managed solution is deployed and managed by our security experts.

L3-L7 multilayer protection

Protection against DNS attacks

Protection against DNS attacks

Routing of legitimate traffic

With anti DDoS:

  • Protect yourself against phishing proxies, anonymous proxies, botnets, etc.
  • Optimize user experience by allowing them to stay online during an attack and minimize any impact on users
  • Gain visibility and deep understanding on attacks

Connectivity operator

Cegedim.cloud guarantees an Internet access that is always available thanks to our CBox offer already deployed in thousands of pharmacies.

Multi-operator very high-speed Internet

ADSL / VDSL / Fiber in partnership with major network operators to maximize your eligibility

Managed solution

Monitoring and automatic alerts in case of incidents

Security

Secure Internet connection, including firewall, intrusion prevention system (IPS) and Anti Denial of Service (Anti DDoS 

Service continuity

Very high availability thanks to a secure and automatic 4G backup connection