Web Tools

This service offering includes the following: 

• Dynamic chatbots with usage reports can link to live agents.
• A scalable, fast learning, AI-assisted way to help users answer common questions.
• Cloud-hosted portal for maintaining and training the bot.
• Analytics on bot usage, including users and interactions.

WAF

Cloud Web Application Firewall WAF) service offering secures state web applications, data, services, and records that may contain Personally Identifiable Information (PII) such as financial, medical or any private data. The Cloud WAF sits in front of the application server, inspecting and filtering traffic between the web application and the internet. This service can help defend web applications from attacks such as cross-site request forgery (CSRF), cross-site-scripting (XSS), Distributed Denial of Service (DDOS) attacks, file inclusion, and SQL injection.

Cloud WAF features include:

• Continuous Security Delivery
• Device Fingerprinting for Bot Protection
• API Protection
• Unique Out-of-Path Deployment with Full Migration
• Data Leak Prevention
• Integrated Application Security and Application Delivery

The Cloud WAF service offering is charged through a flat rate per license and an allocated proportion of the overall cost of throughput based on the throughput used by a particular web application.

Bot Manager

Cloud WAF includes Bot Manager, a non-intrusive API-based Bot Management solution. Bot Manager detects, eliminates, and manages bot traffic from websites, mobile apps, and APIs in real-time. The solution leverages Intent-based Deep Behavior Analysis, device fingerprinting, and domain-specific detection technologies to identify and eliminate invalid traffic without generating false positives, protecting users against automated attacks such as account takeover, ad fraud, API abuse, application DDoS, card fraud, content scraping, form spam, skewed analytics, and other nefarious activities.

Bot Manager features include:

• Intent-based Deep Behavioral Analysis
• Ability to Handle Bot Traffic in Multiple Ways
• Transparent Reporting and Comprehensive Analytics
• Negligible False Positives
• No DNS Redirection
• Accuracy and Scalability
• Easy Integration

This service offering provides search capabilities for static websites including the following: 

• Ability to index static or ECMS websites hosted by MNIT.
• Search collections can also be created to index databases, flat file systems, and websites and data hosted externally.
• Customized web search results pages.

This service offering includes scheduled or on-demand reporting of website accessibility, technical issues, or errors:

• Accessibility checker to ensure content follows Web Content Accessibility Guidelines (WCAG).
• Link checking to verify that all links on the site are working properly.
• Spellcheck of site content.

This service offering includes the following: 

• Advanced website statistics including user journeys, conversion rates and A/B testing.
• Visualization of users’ clicks and scrolls with heat maps.
• Priority pages, referral paths and demographics of users.
• Feedback mechanism, create workflows and respond to users in real time.

• See MNIT’s Service Level Matrix for service level objectives related to incident resolution. 
• MNIT strives to achieve the response and resolution times as stated in the Service Level Matrix. However, some elements of these services are dependent on vendor availability, support agreements and service levels.

• A service agreement is required for one-time professional services charges for website development, design, content migration, search customization, and any further customizations. These costs are separate from the monthly hosting costs. 
• Customers are generally notified three days in advance of a service update.
• In the case of a significant update where advanced testing of sites is recommended, additional servers are brought online so that users may test their existing code against the updated configuration.  Customers will be provided with guidance for testing and scheduling of the service upgrade will take customer needs into account.

• Agency staff are responsible for following state branding and accessibility standards.
• If agencies choose to use a custom domain name or custom subdomain, the agency is responsible for obtaining, recertifying, and managing those custom domains/subdomains.  Custom domains/subdomains will require a Cloud Web Application Firewall (WAF).