Computer Security and Compliance

Introduction to Progent's Security Consulting Services
Progent's industry certified computer security and compliance consultants can provide a broad range of services designed to help businesses of all sizes to uncover and correct security weaknesses, block attacks, recover from any problems resulting from a breakdown of security, and meet government mandates for guarding data and reporting security incidents. Progent can deliver world-class support for critical security and restoration solutions like AI-based EDR (End Point Protection and Response), MDR (Managed Detection and Response), complete system restoration validation, immutable backup, and off-site backup.

Progent can provide a selection of service modes:

• As-needed remote and on-premises assistance billed by the minute
• Continual managed services billed at a low fixed monthly rate
• Set-price service bundles for a single security evaluation
• Emergency ransomware response. Progent will submit a bid based on an evaluation of the extent of the damage.
  (If your system has been victimized by any version of ransomware, do not panic. Get fast help by calling Progent's 24-hour Ransomware Hot Line at 800-462-8800.)

Delivery options for Progent's as-needed support include:

• Remote Security Support Services
  The majority security-related issues can be resolved remotely via a combination of phone help and a remote connection between Progent's Technical Response Center (TRC) and a client's computer. Progent's Technical Response Center can deliver online security help by offering efficient access to consultants who have the experience and technical resources to fix some of the most difficult problems quickly, making your support expenses affordable and reducing lost productivity.
• Onsite Security Support
  For instances where onsite support is required, Progent can send a technical professional to major metropolitan areas throughout the United States. Progent can also send a security specialist with top certifications and world-class skills to any location in the country.

ProSight Flat-rate Managed Services for Information Assurance
Progent's affordable ProSight series of network management outsourcing services is intended to provide small and mid-size organizations with enterprise-class support and state-of-the-art technology for all facets of information assurance. Managed services available from Progent include:

• ProSight Active Security Monitoring: Endpoint Protection and Ransomware Defense
  Progent's ProSight Active Security Monitoring is an endpoint protection (EPP) service that incorporates SentinelOne's next generation behavior-based machine learning technology to defend endpoints as well as servers and VMs against new malware attacks like ransomware and email phishing, which easily evade traditional signature-matching AV products. ProSight ASM safeguards on-premises and cloud resources and offers a unified platform to address the entire threat progression including protection, infiltration detection, containment, remediation, and forensics. Top capabilities include one-click rollback with Windows Volume Shadow Copy Service (VSS) and real-time system-wide immunization against new threats. Progent is a SentinelOne Partner, dealer, and integrator. Learn more about Progent's ProSight Active Security Monitoring endpoint protection and ransomware defense based on SentinelOne technology.

• ProSight Reporting: Real-time and In-depth Reporting for Ticketing and Network Monitoring Applications
  ProSight Reporting is a growing family of in-depth management reporting tools created to work with the industry's top ticketing and network monitoring platforms such as ConnectWise Manage, ConnectWise Automate, Customer Thermometer, Auvik, and SentinelOne. ProSight Reporting incorporates Microsoft Graph and utilizes color coding to surface and contextualize key issues such as inconsistent support follow-up or machines with out-of-date AVs. By identifying ticketing or network health problems clearly and in near-real time, ProSight Reporting improves productivity, lowers management overhead, and saves money. For more information, visit ProSight Reporting for ticketing and network monitoring applications.

• ProSight Enhanced Security Protection: Unified Physical and Virtual Endpoint Security
  ProSight Enhanced Security Protection managed services offer affordable multi-layer protection for physical servers and virtual machines, workstations, smartphones, and Exchange Server. ProSight ESP uses contextual security and advanced machine learning for round-the-clock monitoring and reacting to security threats from all vectors. ProSight ESP offers two-way firewall protection, penetration alarms, device management, and web filtering via leading-edge technologies packaged within a single agent accessible from a unified control. Progent's security and virtualization experts can help you to design and configure a ProSight ESP environment that meets your company's specific needs and that allows you achieve and demonstrate compliance with legal and industry data protection standards. Progent will assist you define and implement policies that ProSight ESP will enforce, and Progent will monitor your network and react to alarms that require urgent action. Progent can also help your company to set up and verify a backup and disaster recovery solution such as ProSight Data Protection Services so you can recover rapidly from a destructive cyber attack like ransomware. Read more about Progent's ProSight Enhanced Security Protection (ESP) unified endpoint security and Exchange filtering.

• ProSight DPS: Managed Cloud Backup and Recovery
  ProSight Data Protection Services provide small and mid-sized organizations a low cost and fully managed service for reliable backup/disaster recovery. Available at a low monthly price, ProSight Data Protection Services automates and monitors your backup activities and enables fast recovery of critical data, apps and virtual machines that have become unavailable or corrupted due to hardware failures, software bugs, disasters, human error, or malicious attacks such as ransomware. ProSight Data Protection Services can help you back up, recover and restore files, folders, applications, system images, plus Microsoft Hyper-V and VMware images. Critical data can be protected on the cloud, to an on-pr1mises device, or to both. Progent's cloud backup consultants can provide advanced expertise to set up ProSight DPS to be compliant with government and industry regulatory requirements such as HIPAA, FINRA, and PCI and, whenever needed, can help you to restore your business-critical data. Read more about ProSight DPS Managed Backup and Recovery.

• ProSight Email Guard: Spam Filtering, Data Leakage Protection and Content Filtering
  ProSight Email Guard is Progent's email security platform that incorporates the technology of top information security vendors to deliver web-based control and world-class security for all your inbound and outbound email. The powerful structure of Email Guard integrates a Cloud Protection Layer with an on-premises security gateway appliance to provide advanced defense against spam, viruses, Dos Attacks, Directory Harvest Attacks, and other email-based threats. Email Guard's Cloud Protection Layer acts as a preliminary barricade and blocks the vast majority of unwanted email from making it to your security perimeter. This reduces your exposure to inbound attacks and conserves system bandwidth and storage. Email Guard's on-premises gateway appliance provides a further level of inspection for incoming email. For outgoing email, the on-premises gateway provides anti-virus and anti-spam protection, DLP, and encryption. The onsite gateway can also help Exchange Server to track and protect internal email traffic that originates and ends inside your security perimeter. Learn more about Progent's ProSight Email Guard spam filtering, virus defense, email content filtering and data loss protection.

• ProSight Duo MFA: Two-Factor Identity Authentication
  ProSight Duo MFA is a selection of managed service plans incorporating top-ranked technology developed by Duo, a Cisco company, to create two-factor authentication solutions. Two-factor authentication uses an outside-channel endpoint to validate user identity, providing a second level of protection beyond merely passwords. This counters the most common causes of IT security break-ins such as phishing, brute-force password attacks, and stolen personal credentials. Duo's push capability can save time and reduce annoyance by allowing users to prove their identity as easily as tapping "Approve" on the authentication box on their unique endpoint, which could be a phone, a smart watch, or other compatible out-of-band device. This one-tap validation avoids the need to open an email or text message and copy a temporary security passcode. Learn more about Progent's ProSight Duo MFA multi-factor identity authentication service plans.

• ProSight WAN Watch: Network Infrastructure Remote Monitoring and Management
  ProSight WAN Watch is an infrastructure monitoring and management service that makes it simple and inexpensive for smaller organizations to map out, monitor, enhance and troubleshoot their connectivity hardware like routers and switches, firewalls, and wireless controllers as well as servers, printers, client computers and other networked devices. Incorporating cutting-edge Remote Monitoring and Management technology, ProSight WAN Watch makes sure that network diagrams are kept updated, copies and manages the configuration information of virtually all devices on your network, monitors performance, and sends alerts when issues are discovered. By automating complex management processes, WAN Watch can knock hours off ordinary chores such as making network diagrams, reconfiguring your network, locating appliances that need important updates, or isolating performance problems. Learn more about ProSight WAN Watch infrastructure management consulting.

• ProSight LAN Watch: Server and Desktop Remote Monitoring
  ProSight LAN Watch is Progent's server and desktop remote monitoring service that incorporates advanced remote monitoring and management techniques to keep your IT system running at peak levels by tracking the health of critical computers that drive your information system. When ProSight LAN Watch detects an issue, an alert is transmitted immediately to your designated IT management staff and your assigned Progent engineering consultant so that all looming issues can be resolved before they can disrupt productivity Learn more details about ProSight LAN Watch server and desktop monitoring consulting.

• ProSight Virtual Hosting: Hosted VMs at Progent's Tier III Data Center
  With Progent's ProSight Virtual Hosting service, a small business can have its critical servers and apps hosted in a protected Tier III data center on a fast virtual machine host set up and managed by Progent's network support experts. Under the ProSight Virtual Hosting model, the client owns the data, the OS platforms, and the applications. Since the environment is virtualized, it can be moved immediately to a different hardware environment without a lengthy and technically risky configuration process. With ProSight Virtual Hosting, your business is not tied a single hosting provider. Learn more details about ProSight Virtual Hosting services.

• ProSight IT Asset Management: Network Infrastructure Documentation Management
  Progent's ProSight IT Asset Management service is an IT infrastructure documentation management service that makes it easy to create, update, find and protect data about your network infrastructure, procedures, business apps, and services. You can instantly find passwords or IP addresses and be alerted automatically about upcoming expirations of SSLs ,domains or warranties. By cleaning up and managing your network documentation, you can save up to half of time wasted looking for vital information about your network. ProSight IT Asset Management includes a centralized repository for storing and sharing all documents required for managing your business network like recommended procedures and self-service instructions. ProSight IT Asset Management also offers advanced automation for gathering and relating IT information. Whether you're making improvements, doing regular maintenance, or reacting to a crisis, ProSight IT Asset Management gets you the knowledge you need as soon as you need it. Learn more details about Progent's ProSight IT Asset Management service.

The ProSight Ransomware Preparedness Report Service
The ProSight Ransomware Preparedness Report service is an affordable service based on a brief interview with a Progent information assurance expert. The interview is intended to help evaluate your company's ability to stop or recover rapidly following an assault by a ransomware strain like Ryuk, WannaCry, NotPetya, or Hermes. Progent will work with you personally to gather information concerning your current antivirus tools and backup/recovery system, and Progent will then deliver a written Basic Security and Best Practices Report document describing how you can follow industry best practices to deploy an efficient security and backup environment that meets your business requirements. For more information, refer to The ProSight Ransomware Preparedness Report.

Flat-rate Security Assessment and Verification Bundles
Progent offers a portfolio of flat-rate security assessment bundles that deliver exceptional value by utilizing Progent's enterprise-class system monitoring and analysis software plus Progent's technical skills to produce an objective and comprehensive evaluation of your IT environment security posture.

• Security Assessment Service Bundles for Small Organizations
  Progent offers two value-priced security inventory packages intended to allow small organizations to get an objective security assessment from an accredited security consultant. With Progent's External Security Inventory Scan, an engineer administers a comprehensive examination of your IT system from outside your corporate firewall to determine possible gaps in the security profile you expose to the outside. With Progent's Internal Security Inventory Scan, a certified security expert executes a system scan using an authorized computer within your firewalled perimeter to evaluate your exposure to inside assaults. The two security inventory scanning services are configured and run from a secured external site. The scan is managed by an engineer who has been awarded high-level security certifications and who creates a document that details and evaluates the data captured by the security scan and recommend practical improvements where appropriate.
• Security Vulnerability Assessment Packages for Enterprises
  Progent offers three levels of fixed-price security evaluation service bundles intended for enterprises who need to meet compliance standards required by state or industry agencies. Progent's security assessment service bundles offer larger organizations an opportunity to obtain an objective assessment at the viability of their security profile. For every security evaluation package, Progent engineers with top security credentials analyze and report on captured data and offer suggestions for efficient improvements. All the network security assessment packages include an added-cost option for on-premises consultants at any location in the U.S.
• Consulting Services for Horizon3.ai's NodeZero Penetration Testing Platform
  NodeZero from Horizon3.ai is a leading-edge penetration test (pentest) platform that can deliver continuous, concurrent, automated assessment of your network so you can uncover, prioritize, remediate, and confirm cybersecurity vulnerabilities before malicious hackers can take advantage of them. Progent can provide the support of a NodeZero Certified Operator (NCO) who can help you to deploy NodeZero to carry out thorough pentests of your network perimeter and your internal network so you can determine your current security profile. Progent's NodeZero experts can also help you to strengthen your network security and can assist you to plan and deploy a unified cybersecurity strategy that streamlines management and delivers maximum protection for on-prem, cloud-based, and perimeter IT assets. To find out more information about Progent's threat analysis solutions powered by on NodeZero's PEN test products, see Consulting Services for NodeZero's PEN Test Products.
• Stealth Penetration Testing
  Stealth penetration testing, often known as PEN testing, is a critical tool for helping businesses to find out how vulnerable their network systems are to modern attacks. Progent's stealth penetration testing test how well your existing security policies and platforms stand up to authorized but unannounced intrusion attempts managed by Progent's experienced security experts utilizing cutting-edge hacking methods. Find out about Progent's stealth penetration testing services.

We've Been Hacked: What Should We Do?
If your company is now faced with a security crisis and you do not have a detailed recovery plan, visit Progent's Remote Technical Help to find out how to get immediate assistance. Progent provides online technical support from experienced network technicians and can escalate trouble tickets to high-level security experts if required. Your business does not have to be a registered Progent customer to get emergency help for a security breakdown, but you can register as a Progent customer in advance for free and your status as a registered client could save precious time when there is an emergency.

Typically, smaller companies do not have a response procedure in the event of a damaging attack. This is risky, because the damage from a serious security attack can be more devastating for a small company than for a large corporation. Progent's security engineers can assist your business to design an efficient response and event reporting plan that reduces the IT system disruption following a security breach. The step-by-step incident handling procedure outlined by Global Information Assurance Certification is Progent's recommended procedure for responding to a serious security penetration.

Advanced Security Expertise Available from Progent
Progent's certified security consultants offer expertise in vital facets of network security including:

• Security Vulnerability Evaluation and Security Compliance Testing
  Progent offers expertise with information risk auditing utilities like MS Baseline Security Analyzer or LANguard for conducting a variety of automatic system scans to uncover potential security holes. Progent has extensive experience with monitoring tools and can help you to analyze audit results and react efficiently. Progent's certified security consultants also offer web software validation and can perform thorough assessments of enterprise-wide security to validate your company's compliance with important industry security standards such as FISMA, NIST, and ISO. In addition, Progent can evaluate the effectiveness of your wireless protection covering fixed wireless appliances plus portable devices. Learn the details concerning Progent's Information Risk Evaluation and Security Compliance Testing.
• Planning, Building, and Validating Secure Networks
  Any company should have a carefully considered security plan that incorporates both preventive and responsive activity. The proactive plan is a collection of precautions that helps to minimize security holes. The reactive plan specifies procedures to help security personnel to evaluate the damage caused by a breach, repair the damage, record the experience, and restore business functions as soon as feasible. Progent can show you how to design protection into your business processes, set up auditing utilities, define and execute a secure computer architecture, and recommend processes and policies that will enhance the safety of your network. Progent's security experts are ready to help you to set up a firewall, deploy secure offsite access to email and data, and configure an efficient VPN. If your company is looking for an affordable way for jobbing out your network security administration, Progent's Round-the-clock Network Support Options include continual remote system monitoring and fast resolution of problems.
• Data Restoration and Security Forensics
  Progent offers expertise in restoring systems and computers that have been hacked, are quarantined, or have ceased to function as a result of a security breach. Progent can help assess the damage caused by the assault, return your company to ordinary functions, and retrieve information lost as a result of the event. Progent's security specialists can also perform a thorough forensic evaluation by going over event logs and utilizing other proven assessment tools. Progent's background with security consulting minimizes your downtime and allows Progent to recommend effective strategies to prevent or contain future attacks.
• Cisco ASA 5500-X Firewalls with Firepower, ASA 5500 Series Firewalls, and PIX Firewalls Integration and Debugging
  The new Cisco ASA 5500-X Family of firewalls with Firepower Services offer substantially more bang for the buck than Cisco's previous PIX and ASA 5500 firewalls and have superseded the ASA 5500 and PIX 500 firewalls for all new installations. Following Cisco's acquisition of Sourcefire, the entire line of ASA 5500-X firewalls can be configured to support Firepower Services, based on Sourcefire's Snort technology, which is the market's most popular intrusion protection system (IPS). Firepower services bring enhanced capabilities such as advanced malware protection (AMP), URL filtering, real-time threat analytics, and automation. Progent's Cisco-certified CCIE network consultants can help you to maintain your current PIX or Cisco ASA 5500 firewalls or upgrade to ASA 5500-X firewalls with Firepower Services. Progent's consultants can provide remote and on-premises support for ASA 5500-X firewalls with Firepower Services and can assist your business to design, integrate, optimize, manage and troubleshoot firewall solutions based around Cisco ASA 5500-X firewalls with Firepower Services. Read additional details about ASA 5500-X Firewalls with Firepower Services configuration and debugging support.
• Additional Firewall and Virtual Private Network (VPN) Solutions Provided by Progent
  As well as offering support for a wide range of security solutions from Microsoft and Cisco, Progent offers small organizations top-level support for solutions from other major firewall and Virtual Private Network (VPN) suppliers by delivering services such as:
  • Palo Alto Networks support
    
  • Check Point Software Technologies Ltd technical assistance
  • WatchGuard Technologies help
  • Juniper Networks Inc technical assistance
  • SonicWall technical assistance
  • Fortinet FortiGate Firewall consulting
    
  • Symantec Corp technical assistance
  • Barracuda CloudGen Firewall Consultants
• SIEM Solutions
  Security information and event management (SIEM) software and services are intended to interpret the enormous quantity of information represented by security incident logs generated by multiple sources including network appliances, servers, and application software and tools. SIEM software organizes the security logs from these diverse sources and produces summary reports of security incidents as mandated by government regulations and business compliance guidelines. Progent's GIAC-certified network security experts and Cisco CCIE certified network infrastructure consultants can help businesses to plan, deploy and manage a SIEM system that enables them to see the behavior of security incidents and comply with event reporting requirements. (See Progent's Security information and Event Management solutions.)
• Patch Management Services
  Software update management entails installing software updates to operating systems and applications, servers and endpoint devices, peripherals like printers and scanners, network infrastructure appliances like switches and wireless APs, and IoT devices like alarms and robotics. Prompt and correctly managed updating maximizes cybersecurity, regulatory compliance, availability, and functionality. Sporadic software update management can result in security gaps, compatibility issues, sluggish or inconsistent performance, excessive downtime, or unavailability of important functions. Progent's managed services for patch management provide businesses of any size a flexible and affordable alternative for assessing, testing, scheduling, implementing, and tracking updates to your dynamic information network. (Visit Progent's software update management solutions.)

• Certified Information Security Manager Security Support Expertise
  Certified Information Security Manager identifies the basic skills and international standards of performance that information security professionals are required to master. It offers business management the assurance that those who have been awarded their CISM possess the background and knowledge to offer effective security management and consulting services. Progent can offer a CISM-certified support professional to help your enterprise in vital security areas including data security governance, risk assessment, data protection program management, and crisis response management. Get additional information concerning Progent's CISM Security Support Assistance.

• Certified Information Systems Security Professionals (CISSP) Security Consulting Services
  Progent's CISSP consultants are security specialists who have been awarded CISSP certification through demonstrated professional work, rigorous study, and formal examination. CISSP qualification recognizes mastery of an international standard for information security. ANSI has given the CISSP status accreditation in the field of IT security under ISO/IEC 17024. Areas of expertise included within CISSP include security management procedures, security design and models, connection control methodology, applications development security, business processes security, physical security, encryption, telecommunications, Internet security, and disaster recovery planning. Get the details concerning Progent's CISSP Consulting Services.

• CISSP-ISSAP Cybersecurity Architecture Consulting Services
  Progent's CISSP-ISSAP Premier cybersecurity architecture consultants have earned ISSAP status as a result of thorough testing and extensive hands-on work with network security architecture. ISSAP consultants have acquired in-depth understanding of access control systems and techniques, telecommunications and network infrastructure protection, cryptography, requirements analysis, business continuity and DRP, and physical security. Progent's CISSP-ISSAP-premier security specialists can assist your company with all phases of architecture security. Learn the details about Progent's ISSAP Certified Protected Network Infrastructure Consulting Assistance.

• Certified Information Systems Auditor Professional Expertise
  The Certified Information Systems Auditor accreditation is an important qualification that represents mastery in IS security audit and control. Accredited by the American National Standards Institute, the CISA accreditation requires that consultants undergo an exhaustive test given by the ISACA professional group. Progent offers the expertise of a CISA-Premier security professional able to assist businesses in the areas of information systems audit services, IT enforcement, systems and architecture planned useful life, information technology support, protecting information assets, and business continuity preparedness. Learn additional details concerning Progent's Certified Information Systems Auditor (CISA) Support Expertise.

• CRISC-certified IT Risk Management Experts
  The CRISC program was initiated by ISACA in 2010 to verify a consultant's skills to design, implement, and maintain IS control mechanisms to mitigate risk. Progent offers the services of a CRISC-certified engineer to help you to create and execute a workplace continuity strategy based on leading practices promoted by CRISC and geared to match your company's risk tolerance, business objectives, and budgetary guidelines. Progent's network risk management expertise is complementary to the support provided by Progent's CISA-Premier consultants for impartially evaluating your IT control design and also with the services of Progent's CISM experts for defining security policies. Find out additional details concerning Progent's CRISC-certified Risk Management Expertise.

• GIAC (Global Information Assurance Certification) Professional Expertise
  GIAC was founded in 1999 to validate the skill of information technology security experts. GIAC's goal is to assure that a certified professional possesses the skills appropriate to provide services in key categories of system, data, and program security. GIAC certifications are recognized by companies and institutions around the world including and the U.S. NSA. Progent offers the assistance of certified professionals for any of the security services covered under GIAC certification programs such as auditing security systems, incident response, intrusion detection, and web services security. Find out more details about Progent's GIAC (Global Information Assurance Certification) Professional Expertise.