Server Security
Our Web Portal is hosted at Hurricane Electric's state of the art facility
in Fremont, CA. Hurricane Electric is rated as one of the top ten data
centers in the world with amenities including a 24/7 on-site staff,
HVAC environmental systems with up flow air conditioning units,
conditioned un-interruptible power and back-up generators to prevent
energy surges or loss of power, a high-tech security system with
digital video surveillance custom designed to monitor every
entrance, exit, and hallway, and a high-security card key system
that monitors and limits access to certain areas within the facility.
Information being sent to our databases are first processed by a forwarding server
then imported into the database. Our databases are not directly accessible from the Internet.
We are using state of the art firewalls and only allow incoming traffic for ports 80 and 443. Our firewalls are multi-threat security systems which enable secure communications and deliver the best security and performance.
Our Web Portal operates entirely over secured 128-bit encrypted connections and the ClickAway monitoring agents we install on your systems send only asset data and performance data to our data center over outbound port 443 (SSL). Confidential information such as user's passwords does not leave the user's machine. There is no threat of a virus spreading or hack over the Internet due to this outbound-only connection. Due to the purely outbound nature of your systems' contact with our data center, firewall configurations are not needed with our platform. This allows the agents to work in any network configuration without introducing vulnerability to inbound port scans or network attacks.
ClickAway protects against 3rd party attacks by encrypting all data sent from the agents to the data center. All information is first compressed at the client side using a compression key then encrypted and sent over a secured 128-bit encrypted tunnel. Once the information reaches the data center it is first decrypted then uncompressed by using a compression key. The information is then imported into a database which is not directly accessible from the Internet.
The ClickAway monitoring agents are responsible for collecting asset data and performance data. The agents themselves run using the local system account, sending a keep-alive request to the data center every one hour over port 443 for desktops and every one minute over port 80 for servers. Only the Registration ID, which is a unique 128-bit code is sent over port 80. There is no information in the keep-alive packet that identifies the machine or that would enable a hacker to identify the machine.
When we need to connect to your system in order to remedy a problem, we will use the Remote Management Console to establish a secure connection. There are two methods of remote control supported. The first is an ISL connection that operates over port 443, which is 128-bit encrypted. The second is a RDP connection for server machines. This connection is also 128-bit encrypted and is using the Secure Shell 2 (SSh2) tunnel over port 443. Both methods of remote control access are using client to client encryption. Our machine initiates the connection and generates the encryption key. The connection is routed through our data center, which is acting as a pass through tunnel, and then the connection is the made to the client's PC and is decrypted
Learn what MITS monitors

sitemap | about us | privacy policy | terms of use | service area
Copyright © 2003-2008 ClickAway Corporation, all rights reserved
® The ClickAway name and ClickAway logo are registered trademarks of ClickAway Corporation.
Please read our terms of use for more details.




We’re Information Technology specialists