This Specific Terms form the Agreement between you and SPTel Pte. Ltd. (Reg No. 199700517K).
It is agreed between the Parties as follows:
- Service Definitions
"Acceptance" |
Means in relation to a Service, the date of your activation of the Service |
“Content” |
Means, not limited to, messages, alerts, reports, information regarding DDoS events generated by the systems supporting the Service and made available to you |
“IntranetProtect” |
Means the virtual firewall service provided by us that detects and blocks internal cyber threats from your site(s) from traversing across your IPVPN to your other site(s). |
“ThreatProtect” |
Means the virtual firewall service provided by us that detects and blocks external cyber threats from the internet of your network or site perimeter. |
"Fault" |
Means a fault or defect in the Service or any associated equipment or facilities that disrupts the Service (as set out in this Specific Terms). |
“Internet Service” |
Means internet access service provided by us to you |
“MPP Service” or "Service" |
Means the grant to you of the right to use the IntranetProtect and/or ThreatProtect as specified in the Order subject to and in accordance with the terms of this Specific Terms. |
- Managed Perimeter Protection (“MPP”) Service
- In relation to each Order, we will use reasonable endeavours to commence providing ThreatProtect and/or IntranetProtect Services pursuant to such Order on the date of Acceptance for such MPP Services. Such Services will thereafter be provided for the Service Term subject to the termination clauses of this Specific Terms and the General Terms.
- SPTel’s Internet Service and IPVPN are pre-requisites for our ThreatProtect and IntranetProtect Service respectively. You may apply for the aforesaid internet access and IPVPN services through our customer portal.
- Each order for ThreatProtect and/or Intranet Protect applies to only one Internet Service and IPVPN provided by us respectively under an Order.
- MPP Service offers a “Physical CPE Upgrade” for customers who wish to have on-premise based appliance protection instead of the default virtual firewall service. Our terms and conditions for such Managed CPE shall apply to such appliance(s) in addition to this Specific Terms.
- Upon successful subscription of the Service, you would be entitled to access our online system(s) via a single user ID as provided by us which will include information regarding such firewall security events. You may request access for additional users for a fee.
- You may select to upgrade your subscription to a higher tier of Service or downgrade your subscription to a lower tier of Service at any time through our customer portal. There will be no Early Termination Charges applicable in the event that you upgrade your subscription to a higher tier of Service. However, Early Termination Charges will be applicable if you downgrade your subscription to a lower tier of Service. For avoidance of doubt, any change to the subscription of Service will result in a new term of the Terms of Service, which shall commence on the date of the change.
- A request for bandwidth upgrade or downgrade in relation to the associated Internet Service or IPVPN may result in a consequent upgrade or downgrade to the Service. You will be responsible for the additional charges or Early Termination Charges for such change to the Service.
- You agree that:
- The Service is subject to availability of resources, including but not limited to, technical capacity, our delivery systems, network availability and our area of coverage at the time at which the Service is requested or delivered.
- You are responsible to provide the firewall policies as pre-requisite for the activation of the Service.
- Auto-trigger email alerts on detected events are subjected to your internet connectivity and network condition.
- We may modify and/or replace the Service by remote changes to software, and/or the terms under which the Service are provided, at our discretion, at any time. Those changes may interrupt the Service.
- We are not the manufacturer of the Service and that we shall not be responsible for any defects or any loss or damage arising out of such defects, even if we supplied the Service.
- You must not resell the Service or otherwise provide to third parties without our prior written consent, whether for profit or not.
- If you subscribe to any Third Party services directly, you shall be responsible for adhering to the Third Party's terms of service. In no event shall we be responsible for any of the Third Party's performance of the service which you subscribed directly.
- You shall not use the Service in any manner or for any purpose which may constitute a violation or infringement of the rights of any party including but not limited to their intellectual property or confidentiality rights.
- You must not make or attempt any unauthorised access to any part or component of the Service, the network or any third party systems or networks to which you can connect through the Services directly or otherwise.
- You must not disrupt the various networks that are connected to the Service or violate the regulations, policies or procedures of such networks.
- No Warranties
- This Service is provided “as it” and without any representation of warranty, whether express, implied or statutory. We specifically disclaim any merchantability, fitness for a particular purpose.
- We do not guarantee:
- Continuous and uninterrupted performance of the Services.
- Any traffic delays or other changes to traffic caused by the implemented firewall policies.
- Cybersecurity events not detected or protected by us.
- We do not warrant the accuracy, reliability or quality of any Content obtained through the Service; and that the Service and access to them are error free and uninterrupted or available at all times.
- Processing of instructions submitted via telephone
4.1 You may instruct us to act in accordance with your instructions submitted via telephone which are related to the subscription of Services, activation of Services, deactivation of Services and/or termination of Services.
- We shall process the instructions after making proper verification. For the purpose of proper identification, you shall correctly answer our verification enquiries. We shall have the right to refuse to act upon your telephone instructions if:
- the caller is not one of the authorized person(s) stated at clause 6.1.2;
- the caller does not respond correctly to the enquires for the purpose of proper identification;
- You shall be responsible for any and all sums payable arising from your instructions to us. We shall bear no liability for any loss incurred by you for processing instructions submitted in accordance with these terms and/or as a result of misinterpretation of an instruction due to any error, ambiguity or inaccuracy of the instruction.
- Charges
- The Charges payable in relation to each Order do not include cross-connect charges that you may have to incur in connection with the provision of the Service pursuant to such Order unless otherwise stipulated in Order.
- If there is a Fault in any month which entitles you to receive a Service Credit Rebate (as set out in this Specific Terms), the relevant Service Credit Rebate will be applied to the Charges for the following month. Such Service Credit Rebate (if any) shall be your sole and exclusive remedy (and our sole and exclusive liability) in respect of such Fault.
- We reserve the right to charge you for expenses incurred by us in investigating any Fault reported by you if the Fault is not due to or does not lie within our facilities or Network.
- All orders are non-cancellable and all amounts paid are non-refundable.
- Operational Terms and Conditions
- You shall be responsible for:
- Providing us with the names and contact details of any individuals authorised to act on your behalf for Service management matters. We may also accept instructions from a person who we reasonably believe is acting with your authority.
- Assuring that only you or your designated users will access the Service and that you and all your users shall not share user IDs, passwords or other methods for accessing the Service with individuals who are not the designated users of the access provided by us.
- Taking all reasonable steps to prevent unauthorised access to the Service.
- If you become aware of any use of the Service that violates the requirements of Clause 6.1 above, you must take prompt action to suspend your use of the Service. We may ask you to take action within a certain time period. If you fail to comply with our request we may suspend your account.
- Where you require a change to your Service’s policy settings, you may request additions, deletions, or modifications to your Service either on the customer portal or via an application form and we will provide you with the means to request Soft Changes. Such requests shall be subject to additional charges.
- Either Party detecting a Fault in the Service shall notify the other Party as soon as reasonably possible. Our contact details will be provided in our service handover document. Your contact details shall be the details provided by you on in our customer portal. You will reasonably cooperate with us in respect of any fault investigation pertaining to the Service or cyber-attacks.
- Any Service failure such as Fault, missed events or increased false positives due to changes to the system configurations requested by you is your sole responsibility. Any Charges for rectifying such failure caused by you or any third parties will be borne solely by you.
- We reserve the right to immediately stop any ongoing mitigation initiated by you, if any, with or without notice to you, if we determine in our absolute discretion that such mitigation will or may affect the Service's infrastructure, and/or the Network. We will not be liable to you or any third party for the foregoing.
- We may, in our absolute discretion and without notice to you, trigger a black hole if necessary to prevent any harm or imminent harm (such as interruption, disruption, congestion, signal leakage and/or any unauthorised action) to our network or the networks of third parties.
- Rights in Managed Perimeter Protection Service
- The provision of MPP Service pursuant to any Order does not give you any right, title or proprietary interest in the MPP Service. Any software provided to you or made available for your use is licensed only, is subject to any accompanying license agreement, and as between you and us, we retain title in all copies of the software. You do not obtain title to, or ownership of, any intellectual property rights in the software or any copies thereof.
- We own the infrastructure that supports the MPP Service.
- Except as expressly permitted, you must not grant any third party any right to use any MPP Service that has been provided to you.
- Termination Rights supplementing the General Terms
- Where the provision of the MPP Service is conditional on you subscribing to other services with us or satisfying minimum requirements of subscription to such other services from us ("Service Condition"), any violation of the Service Condition will also automatically terminate the MPP Service and you will be liable for Early Termination Charges.
- Where the MPP Service is subscribed as a secondary service to other Services provided by us, the termination of said Services would automatically terminate the MPP Services. In this event, an Early Termination Charge in respect of the MPP Services may be payable.
- The minimum period of Service shall be indicated in the Order. Unless otherwise agreed to in writing, when the minimum period of Service expires, this Agreement will be automatically renewed on a calendar monthly basis (based on the same terms and conditions except for Charges, which shall be based on our then prevailing Charges for the Services) unless you give us a written notice of termination at least 30 days prior to the expiry of the minimum period of Service or the renewed term.
- Without limiting the foregoing, Clause 4, 5 and 6 will survive any expiration or termination of this Agreement. Upon the effective date of termination of the Agreement for any reason: (a) all rights granted to you under this Agreement, including your right to use the Service, will immediately terminate; (b) you must stop all use of the Service, and (c) you must return or, if we request, destroy any Confidential Information.
SCHEDULE A: SERVICE SPECIFICATIONS
Managed Perimeter Protection Service is a suite of security service crafted to deliver detective and preventive security measures or controls at the network perimeter of an enterprise network, defending the network against malicious intents and attacks approaching from the Internet or across customer sites connected via IPVPN. SPTel will provide to you the ThreatProtect “Enterprise” or “Premium”, or IntranetProtect option that you select in our online quotation. These options relate to the respective specifications set out in the table below and in any applicable subscription and will apply in accordance with the details set out in that subscription.
|
ThreatProtect |
IntranetProtect |
|
Enterprise |
Premium |
||
Features |
NG Firewall Anti-Virus Application Control Advanced Threat Protection Virus Outbreak Protection Mobile Malware Protection Botnet IP/Domain Security Intrusion Prevention System ThreatProtect Portal Managed Security Dashboard
|
NG Firewall Anti-Virus Application Control Advanced Threat Protection Virus Outbreak Protection Mobile Malware Protection Botnet IP/Domain Security Intrusion Prevention System Email Anti-SPAM Web Filtering DNS Filtering (Outbound) Web Application Firewall Administrative Access ThreatProtect Portal Managed Security Dashboard Per Incident Report
|
NG Firewall Anti-Virus Application Control Intrusion Prevention System Administrative Access ThreatProtect Portal Managed Security Dashboard Per Incident Report
|
On Demand Value Added Services (“VAS”)
SPTel offers On Demand Value Added Services below to our ThreatProtect “Enterprise”, “Premium”, or “IntranetProtect” option. Additional charges and minimum contract terms may be applicable.
|
ThreatProtect |
IntranetProtect |
|
Enterprise |
Premium |
||
On-Demand VAS |
Email Anti-SPAM Web Filtering DNS Filtering (Outbound) Web Application Firewall High Availability Soft Change Request Enhanced SLA: 15 mins Per Incident Report Customized Notification Protocol Managed Security Dashboard Additional Login |
Web Application Firewall Upgrade High Availability Soft Change Request Enhanced SLA: 15 mins Customized Notification Protocol Managed Security Dashboard Additional Login |
Physical CPE Upgrade High Availability Soft Change Request |
The following list specifically describes the feature set that will be offered in the service options.
Administrative Access |
User access to the administrative portal of Managed Perimeter Protection features, to perform configuration changes directly. This feature is exclusively available under Premium package. |
Advanced Threat Protection |
Cloud-based sandboxing that runs advanced detection and automated mitigation of zero-day unknown threats in a separated secured environment. |
Application Control |
Analyse, define and control the applications and user or user group access allowed traversing across the perimeter. |
Anti-Virus |
Detect, block and remove computer viruses from incoming traffic from outside the network or site. |
Botnet IP/Domain Security |
An IP Reputation Service that provides intelligence on malicious source IPs leveraging our manufacturer’s distributed security network and collaborative partnerships, for proactive anti-botnet protection. |
Customized Notification Protocol |
SPTel will have a standard notification protocol (E.g. escalation personnel contact via SMS). This VAS allows Customer to request to for a bespoke notification protocol |
DNS Filtering (Outbound) |
Screens and monitors incoming Web browsing content to block malicious websites and harmful, inappropriate content based on a set of defined Domain Name Systems. |
Email Anti-SPAM |
Screens and monitors the email stream for SPAM and filters off illegitimate content to protect the Email channels. |
Intrusion Prevention System |
A threat prevention engine that conducts inspection and monitoring of incoming network traffic flows to detect and prevent vulnerability exploits of applications and systems. |
Mobile Malware Protection |
Advanced protection focused on defence against evolving threats targeting mobile devices on the network. |
NG Firewall |
Conducts stateful inspection and monitoring of incoming and outgoing network traffic from a network or site. |
Per Incident Report |
A report relating specifically in depth and context to an incident. |
Managed Security Dashboard Additional Login |
Customer will be provided 2 login accesses to a SIEM dashboard with their DDoSProtect subscription. Additional login access is available at a fee. |
Soft Change Request |
Configuration and administrative changes to Managed Perimeter Protection features |
Web Applications Firewall |
An application firewall which defends against threats riding web traffic, by applying a set of rules to an HTTP conversation. |
Web Filtering |
Screens and monitors incoming web browsing content to block malicious websites and harmful, inappropriate content based on a set of defined rules the likes of URL categorization and malicious website blacklist. |
Virus Outbreak Protection |
Automated updates on the latest virus profiles with Cloud-based Sandbox analysis to detect and halt malware threats in between virus signature updates. |
SCHEDULE B: CHARGES
No. |
Item |
Charges |
1. |
One-Time Charge |
Refer to the Order. |
2. |
Monthly Recurring Charge |
Refer to the Order. |
3a. |
Early Termination Charge for cancellation/termination of Order before Service commencement |
One-Time Charge (if not yet paid) plus all costs and third party liabilities incurred by us as of date of termination. |
3b. |
Early Termination Charge for termination during Service Term |
All Monthly Recurring Charges payable for the remainder of the Service Term. |
3c. |
Early Termination Charge for downgrading during Service Term |
All Monthly Recurring Charges payable for the remainder of the Service Term. |
SCHEDULE C: SERVICE LEVEL AGREEMENT
- We will provide you with Service Level ("SLA") Targets and Rebates as follows:
Service Type |
Service Level Targets |
Service Credit Rebates (% of Monthly Recurring Charge) |
Service Availability (For Enterprise and Premium Service) |
99.95% per calendar month |
Outage time Service Credit |
| High Availability | 99.99% per calendar month | Outage time Service Credit >1min to ≤4mins 0% >5mins to ≤30mins 3% >30mins to ≤4 hours 5% >4 to ≤8 hours 10% >8 hours 20% |
Notification |
30 minutes per High Severity incident |
Notification time Service Credit >30mins to ≤1 hour 5% >1 hour 10% |
Notification (For Enhanced SLA) |
15 minutes per High Severity incident |
Notification time Service Credit >15mins to ≤30mins 5% >30mins 10% |
- Service Availability is calculated as a percentage of time that at least one feature of the service is in function within a given 30-day calendar month. Outage Minutes means the measurement in minutes from the time the Service is unavailable till resolution and is calculated after you open a Priority 1 trouble ticket with us. Service Availability excludes:
- The Internet Service is not available due to reasons such as a DDoS attack or Blackhole
- SPTel has chosen to withdraw the service in observation of product policies, and has duly informed the customer of the service withdrawal
Service Availability (%) = (1 - (Total Eligible Outage Minutes per Service per month) ) x 100
43,200 minutes
* Priority 1 means total loss of Service or degraded Service to the extent that it is unusable by you and you are prepared to release its Service for immediate testing.
- Notification is calculated as the time from a High Severity incident is detected by us and informed to you via online alerts, email, or SMS. Notification excludes non-delivery due to inaccurate email address or phone number, missed calls or failure to access to our online portal.
- Subject to the terms of this Schedule, you will be entitled to a Service Credit Rebate against the Monthly Recurring Charge where a Service to which the Service Level applies fails to be restored by us within the specified time period, as set out in the table in Paragraph 1 above.
- Service Credit Rebate(s) will be applied against your account for the calendar month immediately following the month in which the Fault(s) occurred and is capped for all Service Levels at twenty percent (20%) of one (1) month’s MRCs for each affected MPP Service per month. Service Credit Rebates may not be transferred or applied to any other account.
- Notwithstanding anything herein, the calculation of whether a Service Level is met or not, and shall not take into account Faults or other delays arising from or in connection with any of the following:
- Scheduled maintenance;
- Acts or omissions of you or of any Third Party, or any network, cable, equipment or system connected by you or any Third Party;
- Force majeure (as set out in the General Terms) or an inability to gain access to the location for fault isolation and restoration due to your direct or indirect act, omission or negligence.