Data Security and Compliance

Penetration testing (PEN testing) is a vital method for allowing organizations to determine how exposed their networks are to real world threats by showing how well corporate security processes, procedures and technologies hold up against announced or unannounced attacks by veteran security specialists using advanced hacking techniques. Progent can provide a one-time pentest or run scheduled or continual pentests delivered as a remotely managed service.

Progent's security experts can perform extensive in-depth penetration testing without the knowledge of internal IT staff. Such testing, known as stealth pentesting, uncovers whether existing security monitoring tools such as intrusion detection alerts and event log monitoring are correctly set up and actively monitored.

Penetration testing can encompass any or all of the following areas:

• Running a series of port scanning tools to identify open network access vectors and to characterize a customer's network environment and overall security level.
• Running a series of exploit identification tools that test all open access vectors against a large database of known vulnerabilities resulting from servers that are not up to date on security patches, out of date firmware/software, poorly configured servers and devices, and default or common installation passwords.
• Evaluation of wireless network security by attempting on-site access from publicly accessible locations including parking lots, hallways, bathrooms, and physically adjacent spaces or floors. Identification of security methods utilized by wireless infrastructure and running known exploit tools to gain access.
• Attempting to determine remote access capabilities of the network and perform exploit and brute force attack methods to gain access through remote access infrastructure.
• Performing remote office security evaluation and testing, and determine whether remote sites can be used as a vector into the corporate network through VPNs or other private network infrastructure.
• Performing brute force account and password attacks using a database of over 40 million possible passwords.
• For devices and servers that are successfully penetrated, Progent security experts will manually use assorted hacker techniques to extend such exploit vectors to gain an understanding of the full network environment and see how many internal systems can be accessed and compromised. This type of security testing can expose the full scope of the vulnerability of a network environment.
• Determining internal and external network addressing configuration through email beaconing techniques.
• Performing various Denial of Service (DoS) attacks, coordinated with internal senior management to determine whether it is possible to stop or reduce network throughput. Once proof of impact is reported, such testing can be immediately terminated to avoid impacting business productivity.
• Performing PBX remote access and voice mail security testing.
• Continuous autonomous PEN testing to map your internal/external attack surface and to identify ways that vulnerabilities, improper configurations, stolen credentials, missing patches, and unsound product defaults can be chained together by threat actors into the multi-vector attacks common to modern strains of ransomware. The NodeZero product from Horizon3.ai is an example of a next-generation penetration testing platform powered by AI technology that can be run continuously to assess, tune, repair, and confirm the security posture of networks of any size in order to provide a high level of protection against modern cyberthreats like ransomware.

Progent will provide a complete report of methods used and vulnerabilities uncovered during stealth penetration testing, along with a detailed list of recommended remediation steps. Progent can then work with internal IT staff to perform an audit and evaluation of the actual security protection, configuration, tools, and processes and help your company develop a comprehensive security plan.

Support for Horizon3.ai's NodeZero Penetration Testing Products
NodeZero from Horizon3.ai is a cutting-edge penetration test (pentest) product family that supports repeated, concurrent, programmable assessment of your internal and perimeter network so you can uncover, prioritize, fix, and verify security vulnerabilities before malicious hackers can take advantage of them. Progent's pentest experts can assist you to use NodeZero to perform thorough pentests of your perimeter and your internal network in order to evaluate your current security posture. Progent can also assist you to harden your network security and can assist you to design and deploy a cohesive cybersecurity ecosystem that simplifies management and provides optimum protection for on-premises, multi-cloud, and perimeter IT assets. To find out more information about Progent's vulnerability assessment services powered by on NodeZero's penetration test products, visit Consulting Services for NodeZero's Penetration Test Platform.

ProSight Fixed-price Managed Services for Information Assurance
Progent's affordable ProSight suite of outsourced network management services is intended to provide small and mid-size businesses with enterprise-class support and state-of-the-art technology for all aspects of information assurance and compliance. ProSight managed services offered by Progent include:

• ProSight Active Security Monitoring (ASM): Next Generation Endpoint Protection and Ransomware Recovery
  ProSight Active Security Monitoring is an endpoint protection (EPP) service that utilizes SentinelOne's next generation behavior machine learning technology to guard endpoint devices and physical and virtual servers against new malware assaults like ransomware and email phishing, which routinely get by legacy signature-matching anti-virus tools. ProSight ASM safeguards on-premises and cloud-based resources and provides a single platform to manage the complete malware attack progression including blocking, detection, mitigation, cleanup, and post-attack forensics. Top features include single-click rollback with Windows Volume Shadow Copy Service and automatic network-wide immunization against newly discovered attacks. Progent is a SentinelOne Partner, dealer, and integrator. Learn more about Progent's ProSight Active Security Monitoring endpoint protection and ransomware defense with SentinelOne technology.

• ProSight Enhanced Security Protection (ESP): Unified Physical and Virtual Endpoint Protection
  Progent's ProSight Enhanced Security Protection managed services deliver affordable in-depth security for physical servers and virtual machines, workstations, mobile devices, and Exchange email. ProSight ESP utilizes adaptive security and modern behavior analysis for round-the-clock monitoring and reacting to cyber assaults from all attack vectors. ProSight ESP provides firewall protection, penetration alerts, device management, and web filtering through cutting-edge technologies incorporated within one agent accessible from a unified console. Progent's data protection and virtualization experts can assist you to design and configure a ProSight ESP deployment that addresses your organization's unique requirements and that allows you prove compliance with government and industry information security regulations. Progent will help you define and implement security policies that ProSight ESP will manage, and Progent will monitor your IT environment and react to alarms that call for urgent action. Progent can also help you to set up and test a backup and disaster recovery system such as ProSight Data Protection Services (DPS) so you can recover rapidly from a destructive cyber attack such as ransomware. Learn more about Progent's ProSight Enhanced Security Protection (ESP) unified endpoint protection and Microsoft Exchange filtering.

• ProSight Data Protection Services: Managed Cloud Backup and Recovery
  Progent has worked with advanced backup technology vendors to create ProSight Data Protection Services (DPS), a family of management offerings that deliver backup-as-a-service. All ProSight DPS services manage and monitor your backup operations and allow transparent backup and fast restoration of critical files/folders, apps, images, and Hyper-V and VMware virtual machines. ProSight DPS helps your business recover from data loss caused by hardware breakdown, natural disasters, fire, cyber attacks like ransomware, human mistakes, ill-intentioned insiders, or application glitches. Managed services available in the ProSight DPS portfolio include ProSight DPS Altaro VM Backup, ProSight 365 Total Backup (formerly Altaro Office 365 Backup), ProSight DPS ECHO Backup based on Barracuda dedicated storage, and ProSight MSP360 Cloud and On-prem Backup. Your Progent consultant can assist you to determine which of these fully managed services are most appropriate for your network.

• ProSight Email Guard: Inbound and Outbound Spam Filtering, Data Leakage Protection and Content Filtering
  ProSight Email Guard is Progent's email filtering and encryption solution that uses the services and infrastructure of top information security companies to provide centralized management and world-class protection for your inbound and outbound email. The powerful architecture of Email Guard managed service integrates cloud-based filtering with a local gateway appliance to offer complete defense against spam, viruses, Denial of Service (DoS) Attacks, Directory Harvest Attacks (DHAs), and other email-borne malware. The cloud filter serves as a first line of defense and keeps most unwanted email from reaching your security perimeter. This reduces your exposure to external threats and conserves network bandwidth and storage space. Email Guard's on-premises security gateway appliance adds a further level of inspection for inbound email. For outgoing email, the local gateway provides AV and anti-spam filtering, DLP, and encryption. The on-premises security gateway can also assist Exchange Server to track and safeguard internal email traffic that stays within your corporate firewall. Learn more about Progent's ProSight Email Guard spam filtering, virus defense, email content filtering and data leakage prevention.

• ProSight WAN Watch: Infrastructure Remote Monitoring and Management
  ProSight WAN Watch is a network infrastructure monitoring and management service that makes it easy and affordable for small and mid-sized organizations to map out, track, optimize and troubleshoot their networking appliances like routers, firewalls, and load balancers as well as servers, endpoints and other networked devices. Using cutting-edge Remote Monitoring and Management (RMM) technology, WAN Watch ensures that network diagrams are always updated, copies and displays the configuration of almost all devices connected to your network, tracks performance, and generates alerts when issues are detected. By automating complex management and troubleshooting activities, WAN Watch can cut hours off common chores such as making network diagrams, expanding your network, finding appliances that require important updates, or identifying the cause of performance problems. Find out more details about ProSight WAN Watch network infrastructure monitoring and management consulting.

• ProSight LAN Watch: Server and Desktop Remote Monitoring and Management
  ProSight LAN Watch is Progent's server and desktop monitoring service that incorporates advanced remote monitoring and management technology to keep your IT system running efficiently by tracking the state of critical assets that power your business network. When ProSight LAN Watch detects a problem, an alert is sent automatically to your designated IT management personnel and your assigned Progent engineering consultant so all looming issues can be addressed before they have a chance to impact productivity Learn more about ProSight LAN Watch server and desktop remote monitoring services.

• ProSight Virtual Hosting: Hosted Virtual Machines at Progent's Tier III Data Center
  With Progent's ProSight Virtual Hosting service, a small or mid-size organization can have its key servers and applications hosted in a secure fault tolerant data center on a high-performance virtual machine host set up and managed by Progent's network support experts. With the ProSight Virtual Hosting model, the customer owns the data, the OS software, and the applications. Because the environment is virtualized, it can be ported easily to a different hardware environment without a lengthy and technically risky reinstallation procedure. With ProSight Virtual Hosting, you are not tied one hosting service. Find out more about ProSight Virtual Hosting services.

• ProSight IT Asset Management: Network Documentation Management
  Progent's ProSight IT Asset Management service is a cloud-based IT documentation management service that makes it easy to capture, maintain, retrieve and safeguard data about your IT infrastructure, processes, applications, and services. You can quickly find passwords or serial numbers and be warned about impending expirations of SSLs or warranties. By updating and organizing your IT infrastructure documentation, you can eliminate up to 50% of time wasted searching for critical information about your network. ProSight IT Asset Management includes a centralized repository for holding and collaborating on all documents required for managing your network infrastructure like recommended procedures and self-service instructions. ProSight IT Asset Management also offers advanced automation for collecting and associating IT data. Whether you're planning enhancements, performing maintenance, or reacting to an emergency, ProSight IT Asset Management delivers the information you need when you need it. Learn more about Progent's ProSight IT Asset Management service.

• Progent's Patch Management: Software/Firmware Update Management Services
  Progent's managed services for software and firmware patch management offer organizations of all sizes a flexible and affordable solution for assessing, testing, scheduling, implementing, and tracking software and firmware updates to your ever-evolving IT system. In addition to optimizing the protection and functionality of your computer environment, Progent's software/firmware update management services allow your IT team to concentrate on more strategic initiatives and tasks that derive the highest business value from your network. Read more about Progent's software/firmware update management support services.

• ProSight Duo Multi-Factor Authentication: ID Confirmation, Endpoint Remediation, and Protected Single Sign-on
  Progent's Duo MFA managed services utilize Cisco's Duo technology to defend against compromised passwords by using two-factor authentication (2FA). Duo supports one-tap identity verification with iOS, Google Android, and other out-of-band devices. With Duo 2FA, whenever you log into a secured online account and give your password you are requested to verify your identity on a device that only you possess and that is accessed using a different network channel. A wide selection of out-of-band devices can be utilized as this second means of ID validation including an iPhone or Android or wearable, a hardware/software token, a landline telephone, etc. You may designate several validation devices. For more information about Duo two-factor identity validation services, refer to Cisco Duo MFA two-factor authentication services for access security.

The ProSight Ransomware Preparedness Report Service
The ProSight Ransomware Preparedness Report service is a low-cost service built around a brief interview with a Progent information assurance expert. The interview is designed to help assess your organization's preparedness to block or recover rapidly following an assault by a ransomware variant such as Ryuk, WannaCry, MongoLock, or Hermes. Progent will consult with you directly to collect information concerning your existing cybersecurity posture and backup platform, and Progent will then deliver a custom Basic Security and Best Practices Report detailing how you can apply best practices to build an efficient security and backup/recovery environment that meets your company's requirements. For more information, visit The ProSight Ransomware Preparedness Report.

Contact Progent for Penetration Testing Consulting
If you're looking for computer security consulting expertise, telephone Progent at 800-993-9400 or go to Contact Progent.

Ransomware 24x7 Hot Line: Call 800-462-8800
Progent's Ransomware 24x7 Hot Line is designed to guide organizations to complete the crucial first steps in mitigating a ransomware assault by containing the malware. Progent's online ransomware expert can assist businesses to locate and quarantine infected devices and guard undamaged resources from being compromised. If your network has been breached by any strain of ransomware, act fast. Get help quickly by calling Progent's Ransomware Hot Line at 800-462-8800. For details, see Progent's Ransomware 24x7 Hot Line.