Netstream Security Services: Service description

Netstream Security Services comprise data backup and endpoint protection for your servers, workstations and cloud applications. They form a separate product family and are available independently of the Virtual Data Center. The technical basis is the Acronis Cyber Protect Cloud platform. Your data is stored on our own cloud in our data centres in Switzerland. The management portal is operated by Acronis, with a guaranteed location in the EU at minimum.

Platform

All modules run on the same platform. A single agent runs on your devices. You set up backup and endpoint protection in the same console. You back up Microsoft 365 and Google Workspace without any local installation via a cloud agent.

For partners, resellers and MSPs

The entire platform is designed for managed service providers and resellers. You manage your customers' services centrally and can also offer the platform under your own brand (white label).

Hypervisor Backup

Scope: You back up virtual machines directly at hypervisor level, without an agent in each VM.

Features: Image-based backup of entire VMs including operating system, applications and data, managed centrally via protection plans.

Recovery: Entire VMs or individual files.

Licence unit: per virtual machine

Supported systems: Hypervisor Backup: Supported systems

Workstation Backup

Scope: Files, folders, drives or entire computers running Windows or macOS.

Features: File and image backup, freely selectable frequency and time, email notifications.

Recovery: Individual files, drives or the entire computer, to the original or a replacement device.

Licence unit: per device

Supported systems: Workstation Backup: Supported operating systems

Server Backup

Scope: Physical and virtual servers running Windows or Linux.

Features: File and image backup of entire servers, backup of applications such as databases.

Recovery: Individual files, drives or the entire server, to the original or a replacement machine.

Licence unit: per physical server or per virtual machine. A Standard and an Advanced variant are available. The Advanced variant additionally covers applications such as SQL and Exchange clusters or Oracle.

Supported systems: Server Backup: Supported systems

M365 Backup

Scope: Mailboxes including shared and group mailboxes, OneDrive, SharePoint sites and Teams. OneNote is included in OneDrive, SharePoint and Teams.

Features: Cloud-to-cloud backup without local installation. Up to six backups per day. New users, groups, sites and teams can be included automatically.

Recovery: Individual items or entire areas, to the original location or to another user in the same organisation.

Licence unit: per seat, see Licensing: Microsoft 365 Backup

Google Workspace Backup

Scope: Gmail, Calendar, Contacts, Google Drive and Shared Drives.

Features: Cloud-to-cloud backup without local installation, up to six backups per day.

Recovery: Individual items or entire areas, to the original location or as a download.

Licence unit: per seat

Endpoint Detection & Response (EDR)

Scope: Endpoints with an installed agent.

Features: Real-time protection against malware and ransomware, exploit prevention, URL filtering, detection of suspicious activity and a central overview of incidents.

Response: You can isolate a device from the network, terminate processes, move files to quarantine and roll back changes made by an attack.

Vulnerabilities: Vulnerability assessment is included in the standard licence. Patch management is not part of the standard offering but can be added as an extension.

Licence unit: per workload

Supported systems: EDR: Supported systems

Managed Detection and Response (MDR)

Scope: A security operations centre (SOC) monitors the incidents EDR detects on your endpoints around the clock, investigates them and responds.

Features: Monitoring, automatic containment, isolation of affected devices, incident analysis and recommendations.

Prerequisite: EDR is active on the affected devices.

Licence unit: per workload

Tiers: The Standard and Advanced tiers are available.

Email Security

Scope: Mailboxes in Microsoft 365, Google Workspace and Open-Xchange as well as collaboration applications.

Features: Protection against spam, phishing, fraud and malware. All email traffic is checked in real time, including for APT and zero-day attacks. Delivery is entirely cloud-based, and an incident response service is available.

Licence unit: per mailbox

Data Loss Prevention (DLP)

Scope: Endpoints with an installed agent.

Features: Control of device and network access, rules for email and webmail including text recognition in images, monitoring of messaging tools and control of content on social media. This stops data leaks at the source.

Licence unit: per workload

Network Attached Storage (NAS) Backup

Scope: Network attached storage (NAS).

Features: Backup of the NAS via the platform. Alternatively, a NAS can be connected natively to Netstream Object Storage.

Licence unit: per NAS

Management

You order and change licences in the Netstream Cloud Center. You can find your invoices in the Netstream Hub, see Invoices and billing.

You manage protection plans, backups and recoveries in the console. You receive access via an activation email.

Licensing and storage

Each protected system is licensed individually, for example per device, server or virtual machine. Microsoft 365 and Google Workspace are licensed per seat. In addition, you book a storage package that all your backups share.

Data location

We store your data on our own servers in data centres in Switzerland.

The management portal and the cloud agent for Microsoft 365 and Google Workspace are operated by Acronis, with a guaranteed location in the EU at minimum. The backed-up data itself is stored exclusively in our data centres in Switzerland.

Security and data protection

You can encrypt your backups with your own password. AES-256 is used, and the password is not stored. If it is lost, the backups can no longer be recovered. You can protect access to the console with two-factor authentication.

Availability

You can find the agreed availability and how it is calculated in the article Availability of our services.

Your responsibility

You install the agents on your devices. You set up protection plans and regularly check that your backups are running and can be recovered. You keep your encryption password safe yourself.

For Microsoft 365, a Global Administrator must grant the required permissions. For Google Workspace, you connect your organisation with a super admin account.

Everything else is covered in the articles Shared responsibility and Data return and deletion at the end of the contract.

Billing

We invoice the licences and the storage package. Upgrades are invoiced pro rata for the remaining contract term. Downgrades are subject to the agreed notice periods.

The standard notice period is 30 days. Annual bundles renew for a further year unless cancelled in due time.

Trial

You can test the Security Services free of charge for 14 days.