IT Network Help for Small and Mid-size Companies

Stealth penetration testing (PEN testing) is a crucial means of enabling companies to determine how exposed their networks are to real world attacks by showing how well their current security procedures and technologies hold up against authorized but unannounced attacks by veteran security experts using advanced hacking tools and techniques. Progent can provide one-time PEN testing or continual penetration testing delivered as a managed service.

Progent's cyber security experts can safely carry out extensive penetration testing without alerting a client's IT staff. Stealth penetration testing uncovers whether existing security monitoring tools and procedures such as intrusion detection alerts and event log monitoring are correctly configured and actively monitored.

Penetration testing can encompass any of the following areas:

• Run a string of port scanning tools to spot open network access vectors and to identify and profile a customer's network environment and overall security level.
• Deploy a string of exploit identification utilities that test all open connection vectors against a large database of known vulnerabilities resulting from servers that are not up to date on patches, outdated firmware/software, poorly configured servers and devices, and default or obvious passwords.
• Assess wireless network security by trying to gain on-site access from publicly accessible locations such as parking areas, hallways, restrooms, and physically adjacent floors. Identification of security techniques used by wireless networks and running familiar exploit tools to get access to the network.
• Attempt to understand remote connectivity capabilities of the network and use exploit and brute force attack methods to gain access via remote access gaps.
• Perform remote office security evaluation and testing, and determine whether remote sites can be used as a vector into the corporate network through VPNs or other private network infrastructure.
• Execute brute force account and password attacks based on a trove of more than 40 million common passwords.
• For servers and devices successfully penetrated, Progent security professionals will manually deploy assorted hacker techniques to expand such exploit vectors to gain a picture of the complete network environment and determine how many internal systems can be penetrated and exploited. This class of security testing can reveal the real extent of the vulnerability of a network environment.
• Understand internal and external network addressing configuration through email beaconing methods.
• Launch a variety of DoS attacks, coordinated with top network management to determinewhether it is possible to halt or hinder network productivity. Once proof of impact is recognized, such testing can be instantly stopped to avoid seriously impacting operations.
• Perform PBX phone system remote access and voice mail security testing.
• Provide ongoing automatic penetration testing to define your internal/external attack surface and to determine ways that vulnerabilities, improper configurations, stolen credentials, missing patches, and unsound product defaults can be combined by threat actors into the multi-vector attacks typical of the latest versions of ransomware.

Progent will generate a full report of techniques used and vulnerabilities exposed during stealth PEN testing, along with a detailed list of suggested fixes. Progent can then cooperate with internal IT staff to perform an audit and evaluation of your in-place security defense, configuration, tools, and work flows and help your company to develop and implement a solid cyber security plan.

ProSight Low-Cost Managed Services for Information Assurance
Progent's low-cost ProSight series of managed services is intended to provide small and mid-size businesses with enterprise-class support and cutting-edge technology for all facets of information assurance. Managed services offered by Progent include:

• ProSight Active Security Monitoring (ASM): Endpoint Protection and Ransomware Defense
  Progent's ProSight Active Security Monitoring (ASM) is an endpoint protection service that utilizes SentinelOne's next generation behavior analysis technology to guard endpoint devices as well as physical and virtual servers against modern malware attacks such as ransomware and email phishing, which easily get by legacy signature-matching AV tools. ProSight Active Security Monitoring protects on-premises and cloud resources and offers a single platform to automate the complete threat lifecycle including protection, detection, containment, remediation, and post-attack forensics. Top features include one-click rollback with Windows Volume Shadow Copy Service and real-time system-wide immunization against newly discovered threats. Progent is a SentinelOne Partner, dealer, and integrator. Learn more about Progent's ProSight Active Security Monitoring (ASM) next-generation endpoint protection and ransomware defense with SentinelOne technology.

• ProSight Enhanced Security Protection (ESP): Unified Endpoint Security
  Progent's ProSight Enhanced Security Protection managed services deliver affordable multi-layer security for physical and virtual servers, desktops, mobile devices, and Exchange email. ProSight ESP uses contextual security and modern behavior analysis for continuously monitoring and reacting to security assaults from all attack vectors. ProSight ESP delivers two-way firewall protection, intrusion alarms, device management, and web filtering via leading-edge technologies packaged within a single agent managed from a unified console. Progent's security and virtualization consultants can assist you to design and implement a ProSight ESP environment that addresses your organization's unique requirements and that helps you achieve and demonstrate compliance with legal and industry information protection standards. Progent will assist you specify and implement security policies that ProSight ESP will enforce, and Progent will monitor your network and respond to alarms that require urgent action. Progent's consultants can also help you to set up and verify a backup and restore system such as ProSight Data Protection Services so you can recover rapidly from a potentially disastrous cyber attack like ransomware. Learn more about Progent's ProSight Enhanced Security Protection (ESP) unified physical and virtual endpoint protection and Exchange email filtering.

• ProSight DPS: Managed Backup and Recovery
  Progent has partnered with leading backup/restore product companies to create ProSight Data Protection Services, a portfolio of offerings that provide backup-as-a-service (BaaS). All ProSight DPS services automate and monitor your data backup operations and allow non-disruptive backup and fast recovery of critical files, apps, images, and VMs. ProSight DPS helps you avoid data loss caused by equipment failures, natural calamities, fire, malware like ransomware, human error, malicious insiders, or software glitches. Managed services available in the ProSight DPS selection include ProSight Altaro VM Backup, ProSight 365 Total Backup (formerly Altaro Office 365 Backup), ProSight DPS ECHO Backup using Barracuda dedicated storage, and ProSight DPS MSP360 Hybrid Backup. Your Progent service representative can help you to determine which of these managed backup services are most appropriate for your IT environment.

• ProSight Email Guard: Inbound and Outbound Spam Filtering, Data Leakage Protection and Email Encryption
  ProSight Email Guard is Progent's email security solution that uses the services and infrastructure of top data security vendors to deliver web-based control and comprehensive protection for your inbound and outbound email. The powerful structure of Email Guard managed service integrates a Cloud Protection Layer with an on-premises security gateway appliance to provide advanced defense against spam, viruses, Dos Attacks, Directory Harvest Attacks (DHAs), and other email-borne malware. Email Guard's cloud filter serves as a first line of defense and keeps the vast majority of threats from making it to your network firewall. This reduces your vulnerability to external attacks and conserves network bandwidth and storage. Email Guard's on-premises gateway appliance adds a deeper layer of inspection for incoming email. For outgoing email, the local security gateway provides AV and anti-spam filtering, protection against data leaks, and encryption. The onsite gateway can also assist Microsoft Exchange Server to track and protect internal email that originates and ends within your corporate firewall. Learn more about Progent's ProSight Email Guard spam filtering, virus defense, content filtering and data loss protection.

• ProSight WAN Watch: Infrastructure Remote Monitoring and Management
  Progent's ProSight WAN Watch is an infrastructure management service that makes it simple and affordable for small and mid-sized businesses to map out, track, optimize and debug their networking hardware like routers, firewalls, and wireless controllers as well as servers, printers, client computers and other networked devices. Using cutting-edge RMM technology, ProSight WAN Watch ensures that infrastructure topology diagrams are always updated, captures and manages the configuration of virtually all devices on your network, monitors performance, and generates alerts when potential issues are discovered. By automating time-consuming management activities, ProSight WAN Watch can cut hours off common tasks like making network diagrams, reconfiguring your network, locating appliances that require important updates, or resolving performance problems. Find out more about ProSight WAN Watch network infrastructure management services.

• ProSight LAN Watch: Server and Desktop Remote Monitoring
  ProSight LAN Watch is Progent's server and desktop monitoring service that incorporates state-of-the-art remote monitoring and management (RMM) techniques to help keep your network operating efficiently by checking the health of critical computers that power your information system. When ProSight LAN Watch detects an issue, an alarm is sent automatically to your specified IT management personnel and your assigned Progent engineering consultant so that any potential problems can be addressed before they can disrupt your network Find out more details about ProSight LAN Watch server and desktop monitoring consulting.

• ProSight Virtual Hosting: Hosted Virtual Machines at Progent's Tier III Data Center
  With ProSight Virtual Hosting service, a small organization can have its critical servers and apps hosted in a protected Tier III data center on a high-performance virtual host set up and maintained by Progent's IT support professionals. Under the ProSight Virtual Hosting service model, the customer retains ownership of the data, the OS platforms, and the applications. Because the environment is virtualized, it can be ported easily to an alternate hardware solution without a lengthy and difficult configuration procedure. With ProSight Virtual Hosting, you are not tied a single hosting service. Find out more details about ProSight Virtual Hosting services.

• ProSight IT Asset Management: Network Documentation Management
  Progent's ProSight IT Asset Management service is a cloud-based IT documentation management service that allows you to create, update, find and safeguard data related to your network infrastructure, processes, business apps, and services. You can instantly find passwords or serial numbers and be warned automatically about impending expirations of SSLs or domains. By cleaning up and organizing your IT infrastructure documentation, you can save as much as 50% of time spent searching for vital information about your network. ProSight IT Asset Management features a centralized location for storing and collaborating on all documents required for managing your business network like recommended procedures and How-To's. ProSight IT Asset Management also supports advanced automation for gathering and associating IT data. Whether you're making enhancements, doing maintenance, or responding to an emergency, ProSight IT Asset Management gets you the knowledge you need when you need it. Find out more details about Progent's ProSight IT Asset Management service.

• Patch Management: Patch Management Services
  Progent's managed services for patch management provide businesses of any size a versatile and cost-effective alternative for assessing, validating, scheduling, applying, and documenting updates to your dynamic IT network. Besides optimizing the security and functionality of your computer network, Progent's software/firmware update management services permit your IT team to concentrate on more strategic initiatives and tasks that derive maximum business value from your network. Learn more about Progent's software/firmware update management services.

• ProSight Duo Two-Factor Authentication: Identity Validation, Endpoint Policy Enforcement, and Secure Single Sign-on (SSO)
  Progent's Duo MFA managed services incorporate Cisco's Duo cloud technology to protect against password theft through the use of two-factor authentication. Duo supports single-tap identity confirmation on iOS, Google Android, and other personal devices. With 2FA, when you sign into a secured application and give your password you are requested to confirm your identity on a unit that only you have and that uses a different network channel. A broad selection of devices can be utilized as this second means of ID validation including a smartphone or wearable, a hardware/software token, a landline telephone, etc. You can designate several validation devices. For more information about ProSight Duo identity validation services, visit Cisco Duo MFA two-factor authentication (2FA) services.

Progent's ProSight Ransomware Preparedness Report Service
The ProSight Ransomware Preparedness Report service is a low-cost service centered on a phone interview with a Progent backup/recovery consultant. The interview is intended to help evaluate your company's ability either to stop or recover quickly following an attack by a ransomware variant such as Ryuk, WannaCry, NotPetya, or Locky. Progent will consult with you personally to gather information about your existing AV defense and backup/recovery platform, and Progent will then produce a custom Basic Security and Best Practices Report document describing how you can apply industry best practices to build an efficient AV and backup system that meets your company's requirements. For more information, see The ProSight Ransomware Preparedness Report Service.

Contact Progent for Penetration Testing Consulting
If you're looking for computer security support services, telephone Progent at 800-993-9400 or refer to Contact Progent.

Ransomware 24x7 Hot Line: Call 800-462-8800
Progent's Ransomware 24x7 Hot Line is designed to guide organizations to take the time-critical first phase in mitigating a ransomware attack by stopping the bleeding. Progent's online ransomware engineer can assist businesses to identify and quarantine infected servers and endpoints and guard undamaged assets from being compromised. If your network has been breached by any version of ransomware, act fast. Get help quickly by calling Progent's Ransomware Hot Line at 800-462-8800. For details, visit Progent's Ransomware 24x7 Hot Line.