Computer Security and Compliance

Overview of Progent's Security and Compliance Consulting Services
Progent's industry certified network security professionals can provide a broad range of services intended to assist companies of all sizes to identify and correct security weaknesses, defend against assaults, remediate any damage resulting from a breakdown of protection, and comply with government mandates for protecting data and reporting security incidents. Progent can provide advanced support for vital cybersecurity and recovery technologies including AI-driven EDR (End Point Protection and Response), Managed Detection and Response, full system restore validation and testing, immutable backup, and off-site backup.

Progent can provide a choice of service models:

• As-needed remote and on-premises support billed to the nearest minute
• Continual fully managed services invoiced at an affordable fixed monthly rate
• Value-priced service bundles for a one-time security evaluation
• Emergency ransomware recovery. Progent will propose a bid after an assessment of the extent of the damage.
  (If your system has been victimized by any version of ransomware, do not panic. Get fast help by calling Progent's 24x7 Ransomware Hot Line at 800-462-8800.)

Delivery options for Progent's as-needed support include:

• Online Security Support Services
  Most security problems can be resolved remotely through a combination of phone help and a remote Internet connection between Progent's Technical Response Center (TRC) and a customer's network. Progent's Technical Response Center can deliver remote security support by offering easy access to consultants who have the background and technical resources to resolve some of the most difficult problems quickly, keeping your support costs affordable and reducing lost productivity.
• On-premises Security Services
  For cases where onsite assistance is necessary, Progent can dispatch a technical expert to major cities across the U.S. Progent can also send a security specialist with top certifications and advanced skills to any location in the country.

ProSight Fixed-price Managed Services for Information Assurance
Progent's affordable ProSight portfolio of network monitoring and management services is designed to provide small and mid-size businesses with enterprise-class support and state-of-the-art technology for all aspects of information assurance and compliance. Managed services offered by Progent include:

• ProSight Active Security Monitoring (ASM): Next Generation Endpoint Protection and Ransomware Defense
  ProSight Active Security Monitoring (ASM) is an endpoint protection solution that utilizes SentinelOne's cutting edge behavior-based machine learning technology to defend endpoint devices as well as servers and VMs against modern malware attacks such as ransomware and file-less exploits, which routinely get by legacy signature-matching AV products. ProSight ASM protects on-premises and cloud resources and provides a unified platform to manage the complete malware attack lifecycle including filtering, identification, containment, cleanup, and post-attack forensics. Key features include one-click rollback with Windows VSS and automatic network-wide immunization against new attacks. Progent is a SentinelOne Partner, dealer, and integrator. Find out more about Progent's ProSight Active Security Monitoring next-generation endpoint protection and ransomware recovery powered by SentinelOne technology.

• ProSight Reporting: Real-time and In-depth Reporting for Ticketing and Network Monitoring Platforms
  ProSight Reporting is an expanding line of real-time and in-depth management reporting tools created to integrate with the industry's top ticketing and remote network monitoring programs including ConnectWise Manage, ConnectWise Automate, Customer Thermometer, Auvik, and SentinelOne. ProSight Reporting incorporates Microsoft Graph and utilizes color coding to highlight and contextualize key issues such as spotty support follow-through or endpoints with out-of-date AVs. By exposing ticketing or network health concerns clearly and in near-real time, ProSight Reporting improves network value, lowers management hassle, and saves money. For details, visit ProSight Reporting for ticketing and network monitoring applications.

• ProSight Enhanced Security Protection (ESP): Unified Physical and Virtual Endpoint Protection
  Progent's ProSight Enhanced Security Protection services deliver ultra-affordable multi-layer security for physical and virtual servers, workstations, smartphones, and Exchange email. ProSight ESP utilizes contextual security and modern behavior analysis for round-the-clock monitoring and reacting to cyber threats from all attack vectors. ProSight ESP offers two-way firewall protection, intrusion alarms, endpoint control, and web filtering through leading-edge tools incorporated within one agent accessible from a unified control. Progent's data protection and virtualization experts can assist you to plan and implement a ProSight ESP deployment that addresses your organization's unique requirements and that helps you achieve and demonstrate compliance with legal and industry information security regulations. Progent will help you specify and implement policies that ProSight ESP will manage, and Progent will monitor your IT environment and react to alerts that require immediate attention. Progent can also assist you to set up and test a backup and restore solution such as ProSight Data Protection Services so you can recover quickly from a potentially disastrous security attack like ransomware. Learn more about Progent's ProSight Enhanced Security Protection unified endpoint security and Exchange filtering.

• ProSight DPS: Managed Cloud Backup
  ProSight Data Protection Services from Progent provide small and medium-sized businesses an affordable and fully managed service for reliable backup/disaster recovery. For a fixed monthly cost, ProSight DPS automates and monitors your backup processes and allows rapid restoration of critical files, apps and VMs that have become unavailable or corrupted due to component failures, software bugs, natural disasters, human mistakes, or malicious attacks such as ransomware. ProSight Data Protection Services can help you protect, recover and restore files, folders, apps, system images, as well as Hyper-V and VMware images. Critical data can be protected on the cloud, to a local storage device, or mirrored to both. Progent's BDR consultants can deliver world-class support to configure ProSight Data Protection Services to to comply with government and industry regulatory standards like HIPAA, FINRA, and PCI and, when needed, can assist you to restore your critical data. Find out more about ProSight Data Protection Services Managed Cloud Backup and Recovery.

• ProSight Email Guard: Spam Filtering, Data Leakage Protection and Content Filtering
  ProSight Email Guard is Progent's email security solution that incorporates the technology of leading data security vendors to provide web-based management and world-class security for your email traffic. The powerful structure of Email Guard managed service combines cloud-based filtering with a local gateway appliance to offer advanced protection against spam, viruses, Denial of Service (DoS) Attacks, Directory Harvest Attacks, and other email-borne threats. The Cloud Protection Layer serves as a first line of defense and keeps most threats from reaching your security perimeter. This reduces your exposure to inbound attacks and saves system bandwidth and storage space. Email Guard's onsite security gateway appliance provides a deeper layer of analysis for inbound email. For outgoing email, the onsite security gateway offers AV and anti-spam protection, protection against data leaks, and encryption. The local security gateway can also assist Exchange Server to track and safeguard internal email traffic that stays inside your corporate firewall. Find out more about Progent's ProSight Email Guard spam filtering, virus defense, content filtering and data leakage protection.

• ProSight Duo MFA: Two-Factor Authentication
  ProSight Duo MFA is a selection of managed services utilizing top-ranked technology developed by Duo, a Cisco-owned company, to create two-factor authentication (2FA) environments. Two-factor authentication uses an out-of-band device to validate identity, providing an additional level of access security beyond merely passwords. This protects against the majority of network security breaches like phishing, brute-force password attacks, and purloined personal credentials. Duo's push capability can save time and reduce frustration by allowing users to confirm their identity simply by clicking "Approve" on the authentication box on their own personal endpoint, which can be an Android or iOS smartphone, a watch, or other supported device. This single-tap validation eliminates the requirement to open an email or text and manually transcribe a temporary security code. Find out more about Progent's ProSight Duo MFA two-factor identity authentication service plans.

• ProSight WAN Watch: Network Infrastructure Remote Monitoring and Management
  ProSight WAN Watch is an infrastructure monitoring and management service that makes it easy and affordable for small and mid-sized organizations to map, monitor, enhance and troubleshoot their networking hardware like routers and switches, firewalls, and access points as well as servers, printers, endpoints and other devices. Incorporating state-of-the-art Remote Monitoring and Management (RMM) technology, WAN Watch ensures that infrastructure topology diagrams are kept updated, captures and manages the configuration of almost all devices connected to your network, tracks performance, and generates notices when problems are detected. By automating tedious management and troubleshooting activities, ProSight WAN Watch can knock hours off common chores like making network diagrams, reconfiguring your network, finding appliances that need important updates, or isolating performance issues. Learn more details about ProSight WAN Watch network infrastructure monitoring and management services.

• ProSight LAN Watch: Server and Desktop Monitoring
  ProSight LAN Watch is Progent's server and desktop monitoring managed service that uses state-of-the-art remote monitoring and management technology to help keep your IT system operating at peak levels by checking the state of critical assets that power your information system. When ProSight LAN Watch detects a problem, an alarm is transmitted immediately to your designated IT management staff and your assigned Progent consultant so that any potential issues can be resolved before they can disrupt your network Learn more details about ProSight LAN Watch server and desktop monitoring consulting.

• ProSight Virtual Hosting: Hosted Virtual Machines at Progent's Tier III Data Center
  With ProSight Virtual Hosting service, a small or mid-size organization can have its critical servers and applications hosted in a protected fault tolerant data center on a high-performance virtual host set up and maintained by Progent's network support experts. With Progent's ProSight Virtual Hosting model, the customer retains ownership of the data, the operating system software, and the applications. Because the system is virtualized, it can be moved easily to an alternate hosting environment without a lengthy and difficult reinstallation procedure. With ProSight Virtual Hosting, you are not tied a single hosting provider. Find out more about ProSight Virtual Hosting services.

• ProSight IT Asset Management: Network Documentation Management
  ProSight IT Asset Management service is a cloud-based IT documentation management service that allows you to create, maintain, retrieve and safeguard data related to your IT infrastructure, processes, business apps, and services. You can instantly locate passwords or serial numbers and be alerted about upcoming expirations of SSL certificates or warranties. By updating and organizing your IT infrastructure documentation, you can eliminate as much as half of time wasted searching for vital information about your IT network. ProSight IT Asset Management features a common location for holding and sharing all documents related to managing your business network like standard operating procedures and How-To's. ProSight IT Asset Management also supports a high level of automation for gathering and relating IT data. Whether you're planning improvements, doing maintenance, or responding to a crisis, ProSight IT Asset Management delivers the information you need as soon as you need it. Learn more details about Progent's ProSight IT Asset Management service.

The ProSight Ransomware Preparedness Report
The ProSight Ransomware Preparedness Report service is an affordable service centered on a brief discussion with a Progent information assurance expert. The fact-finding interview is designed to evaluate your company's preparedness either to block or recover rapidly following an attack by a ransomware strain like Ryuk, WannaCry, NotPetya, or Locky. Progent will work with you directly to collect information about your existing AV defense and backup platform, and Progent will then produce a written Basic Security and Best Practices Report detailing how you can follow best practices to build an efficient AV and backup/recovery system that meets your business requirements. For details, refer to Progent's ProSight Ransomware Preparedness Report.

Flat-rate Security Evaluation and Verification Bundles
Progent offers a variety of set-price security and compliance evaluation packages that provide exceptional value by deploying Progent's enterprise-class network monitoring and analysis software plus Progent's technical experience to produce an objective and comprehensive assessment of your IT environment security profile.

• Security Inventory Service Packages for Small Businesses
  Progent offers two value-priced security inventory scanning packages intended to enable small organizations to obtain an objective security evaluation from an accredited security engineer. With Progent's External Security Inventory Scan, a consultant manages an extensive assessment of your network from beyond your corporate firewall to determine possible risks in the security posture you present to the outside world. With Progent's Internal Security Inventory Scan, a certified security expert runs a system scan from an authorized machine within your firewalled perimeter to assess your exposure to internal threats. The two security inventory services are configured and run from a secured external site. The project is managed by a consultant who has earned high-level security certifications and who produces a report that details and evaluates the information captured by the security scan and recommend various enhancements where appropriate.
• Security Vulnerability Assessment Bundles for Large Organizations
  Progent has developed three levels of flat-rate security assessment service bundles intended for enterprises who want to meet security standards required by state or industry agencies. Progent's security evaluation service packages offer enterprises an opportunity to obtain an objective assessment at the viability of their security posture. For each security assessment package, Progent engineers with advanced security credentials study and report on captured data and provide suggestions for cost-effective remediation. All the network security audit bundles include an added-cost option for on-premises consultants at any location in the U.S.
• Consulting Services for Horizon3.ai's NodeZero PEN Testing Solutions
  NodeZero from Horizon3.ai is a cutting-edge penetration test (pentest) product family that supports continuous, simultaneous, programmable testing of your internal and perimeter network so you can uncover, prioritize, fix, and verify cybersecurity vulnerabilities before malicious hackers can take advantage of them. Progent offers the skills of a NodeZero Certified Operator who can help you to deploy NodeZero to perform comprehensive pentests of your perimeter and your internal network in order to evaluate your present security posture. Progent's NodeZero experts can also assist you to harden your existing network security and can help you to design and deploy a unified cybersecurity ecosystem that streamlines management and delivers optimum protection for on-prem, multi-cloud, and perimeter IT resources. To find out more information about Progent's vulnerability assessment solutions based on on NodeZero's PEN test products, refer to Consulting Services for NodeZero's Pentest Products.
• Stealth Penetration Testing
  Stealth penetration testing, commonly called PEN testing, is a critical tool for helping organizations to determine how open their IT environments are to modern threats. Progent's stealth penetration testing test how well your corporate security policies and technologies resist authorized but unannounced penetration attempts managed by Progent's certified security specialists utilizing cutting-edge hacking methods. Find out about Progent's stealth penetration testing services.

We've Been Hacked: What Can We Do?
If your business is now fighting a network security emergency and you have no detailed recovery plan, visit Progent's Online Computer Support to learn how to get immediate help. Progent provides remote assistance from experienced network technicians and can escalate trouble tickets to certified security experts if necessary. Your organization does not have to be a registered Progent client to receive urgent help for a security breach, but you can sign up as a Progent customer ahead of time for free and your standing as a registered client could save precious time when there is a crisis.

Usually, smaller businesses have not documented a response procedure in the event of a successful attack. This is not good, since the damage from a successful security assault can be more catastrophic for a small company than for a large corporation. Progent's security engineers can assist your you to design a sensible response and incident reporting procedure that reduces the IT system disruption resulting from an attack. The formal incident response model outlined by GIAC is Progent's suggested procedure for handling a major security penetration.

Advanced Security Expertise Offered by Progent
Progent's certified security engineers can provide expertise in key areas of IT security including:

• Vulnerability Evaluation and Security Compliance Assessment
  Progent offers experience with information risk evaluation software such as Microsoft Baseline Security Analyzer or LANguard from GFI for performing a set of automatic network scans to reveal possible security gaps. Progent has broad experience with these utilities and can assist you to understand audit results and react efficiently. Progent's certified security consultants also offer web application testing and can conduct expert assessments of corporate-wide security to confirm your organization's compliance with major worldwide security standards such as FISMA, NIST, and ISO 17799. In addition, Progent can assess the effectiveness of your wireless security including stationary wireless appliances as well as portable devices. Find out the details about Progent's Vulnerability Evaluation and Security Compliance Testing.
• Designing, Implementing, and Testing Secure Environments
  Every business should develop a carefully thought out security plan that incorporates both preventive and reactive elements. The proactive strategy is a collection of precautions that helps to reduce vulnerabilities. The post-attack strategy defines activities to assist IT personnel to assess the losses caused by an attack, repair the damage, record the experience, and revive business functions as soon as feasible. Progent can show you how to build security into your business processes, set up auditing software, create and implement a secure computer architecture, and recommend procedures and policies that will enhance the safety of your computing environment. Progent's security professionals are available to help you to set up a firewall, design secure online and mobile access to email and files, and configure an effective VPN. If you are interested in an affordable way for outsourcing your network security management, Progent's Round-the-clock Network Support Options include automated remote server tracking and quick resolution of emergencies.
• Data Recovery and Failure Analysis
  Progent offers expertise in recovering systems and servers that have been compromised, are in question, or have stopped working as a result of a security penetration. Progent can help determine the losses resulting from the breach, restore ordinary functions, and recover information compromised as a result of the breach. Progent's certified specialists can also oversee a comprehensive failure analysis by examining event logs and utilizing other advanced forensics techniques. Progent's experience with security problems reduces your off-air time and permits Progent to propose effective ways to prevent or mitigate future attacks.
• Cisco ASA 5500-X Firewalls with Firepower, ASA 5500 Firewalls, and PIX Firewalls Configuration and Troubleshooting
  The current ASA 5500-X Series Next-Generation Firewalls with Firepower Services deliver substantially more performance than Cisco's legacy PIX and ASA 5500 firewalls and have superseded the ASA 5500 and PIX 500 firewalls for new installations. After Cisco's acquisition of Sourcefire, the entire family of ASA 5500-X firewalls can be configured to enable Firepower Services, built on Sourcefire's Snort technology, which is the market's most popular intrusion protection system (IPS). Firepower services provide powerful new capabilities such as advanced malware protection (AMP), URL filtering, dynamic threat analytics, and automation. Progent's Cisco-certified CCIE network experts can help you to maintain your current PIX or Cisco ASA 5500 security appliances and migrate efficiently to Cisco ASA 5500-X firewalls with Firepower Services. Progent's consultants can provide remote and onsite support for ASA 5500-X firewalls with Firepower Services and can assist you to plan, deploy, optimize, manage and debug firewall environments built around Cisco ASA 5500-X firewalls with Firepower Services. Read additional details about Cisco ASA 5500-X Firewalls with Firepower Services integration and troubleshooting support.
• Other Firewall and Virtual Private Network (VPN) Technologies Offered by Progent
  As well as offering support for a wide array of security technologies from Microsoft and Cisco, Progent can provide small and mid-size businesses expert support for products from other popular firewall and Virtual Private Network (VPN) suppliers by delivering services such as:
  • Palo Alto Networks integration expertise
    
  • Check Point Software help
  • WatchGuard Technologies consulting
  • Juniper technical assistance
  • SonicWall Inc. support
  • Fortinet FortiGate Firewall integration expertise
    
  • Symantec Corp engineering services
  • Barracuda CloudGen Firewall Consulting
• SIEM Security Information and Event Management Integration and Support
  Security information and event management (SIEM) applications and services are designed to interpret the enormous amounts of data collected in security event records generated by a wide range of sources including network appliances, servers, and application software and monitoring tools. SIEM applications organizes the security event records from these various sources and produces summary reports of security events as mandated by state regulations and business compliance guidelines. Progent's GIAC-certified computer security experts and Cisco CCIE certified network infrastructure consultants can help organizations to design, deploy and operate a SIEM system that helps them to understand the behavior of security incidents and comply with security incident reporting regulations. (Visit Progent's Security information and Event Management solutions.)
• Software Update Management Solutions
  Patch management entails installing software or firmware updates to operating systems and applications, servers and endpoint devices, peripherals like printers, network appliances such as routers and wireless access points, and Internet-of-Things devices such as sensors and health monitors. Prompt and properly managed patching maximizes security, compliance, uptime, and capability. Haphazard patch management can cause security vulnerabilities, compatibility problems, slow or erratic responsiveness, unnecessary downtime, or unavailability of key features. Progent's managed services for software and firmware patch management offer businesses of any size a versatile and cost-effective alternative for assessing, validating, scheduling, implementing, and documenting updates to your ever-evolving IT network. (See Progent's software update management services.)

• Certified Information Security Manager (CISM) Security Consulting Expertise
  Certified Information Security Manager (CISM) identifies the core skills and worldwide benchmarks of performance that information technology security professionals are required to achieve. It offers executive management the confidence that those who have earned their certification have the experience and knowledge to provide effective security administration and consulting support. Progent can offer a CISM-certified support professional to assist your enterprise in vital security disciplines including information security governance, risk management, information protection program control, and crisis handling management. Read more information concerning Progent's Certified Information Security Manager (CISM) Security Consulting Assistance.

• CISSP Security Consulting Services
  Progent's CISSP experts are security engineers who have been awarded CISSP accreditation through demonstrated professional work, extensive study, and exhaustive examination. CISSP qualification indicates mastery of a worldwide standard for information security. ANSI has given the CISSP credential official recognition in the area of information security under ISO/IEC 17024. Areas of expertise included within CISSP include security management procedures, security design and models, connection control methodology, software development security, business processes security, physical security, cryptography, telecommunications, network security, and business continuity planning. Find out more information concerning Progent's CISSP Support Assistance.

• CISSP-ISSAP Security Architecture Consulting Services
  Progent's CISSP-ISSAP Premier cybersecurity architecture consultants have been awarded ISSAP certification after rigorous testing and extensive hands-on work with network security design. ISSAP security experts possess in-depth understanding of access management systems and methodologies, telecommunications and network infrastructure protection, cryptography, requirements analysis, business continuity planning (BCP) and disaster recovery, and physical security integration. Progent's CISSP-ISSAP-premier security specialists can help your business with all aspects of secure network architecture. Learn more information concerning Progent's ISSAP Certified Protected System Infrastructure Consulting Support.

• CISA Support Services
  The CISA accreditation is a globally recognized qualification that indicates mastery in IS security auditing. Accredited by ANSI, the CISA credential requires that consultants undergo an exhaustive examination given by the ISACA professional association. Progent offers the expertise of a CISA-Certified security audit professional trained to assist companies in the areas of information systems audit process, IT administration, network assets and infrastructure lifecycle, IT service delivery, protecting information assets, and disaster recovery preparedness. Read more information concerning Progent's Certified Information Systems Auditor Consulting Services.

• CRISC Risk Management Consultants
  The CRISC program was initiated by ISACA to verify an IT professional's ability to design, implement, and support IS control mechanisms to reduce risk. Progent can provide the expertise of a CRISC-certified engineer to assist you to develop and carry out a business continuity strategy based on leading practices promoted by CRISC and geared to align with your company's risk appetite, business objectives, and IT budget. Progent's network risk mitigation expertise is complementary to the support available from Progent's CISA-Certified security engineers for impartially evaluating your IT management mechanisms and also with the services of Progent's CISM-certified support professionals for implementing company-wide security policies. Read additional details about Progent's CRISC-certified Network Risk Management Expertise.

• GIAC Professional Expertise
  GIAC (Global Information Assurance Certification) was established in 1999 to certify the knowledge of information technology security experts. GIAC's goal is to make sure that a certified security consultant has the skills appropriate to deliver support in vital categories of network, data, and application security. GIAC accreditations are acknowledged by businesses and government organizations throughout the world including and the U.S. National Security Agency (NSA). Progent offers the assistance of GIAC certified professionals for any of the security services covered within GIAC accreditation programs such as auditing security systems, incident handling, intrusion detection, and web-based services security. Get more information concerning Progent's GIAC Support Expertise.