Network Expertise for Mid-size Businesses

Stealth penetration testing (PEN testing) is a key method for allowing organizations to find out how exposed their IT systems are to cyber threats by showing how successfully their corporate security processes hold up against intentional but unannounced attacks by seasoned security experts using advanced hacking tools and techniques. Progent offers on-demand penetration testing or ongoing PEN testing delivered as a managed service.

Progent's network security experts can safely provide extensive penetration testing without the knowledge of a client's IT staff. So-called Stealth PEN testing uncovers whether existing security monitoring tools and processes like intrusion alerts and event log monitoring are correctly set up and regularly managed.

Penetration testing can encompass any of these areas:

• Run a series of port scanning tools to spot open network access vectors and to discover and characterize a customer's network environment and overall security posture.
• Deploy a combination of threat identification tools that test all open connection vectors against a large database of familiar security gaps caused by servers that are not up to date on patches, outdated firmware/software, poorly configured servers and infrastructure devices, and default or obvious passwords.
• Assess WiFi network security by trying to gain on-site access from publicly accessible places including parking areas, hallways, bathrooms, and physically attached areas. Identification of security techniques utilized by WiFi infrastructure and running known exploit utilities to gain access to the network.
• Attempt to determine remote access features of the network and perform exploit and brute force attack methods to get access through remote access gaps.
• Perform remote office security evaluation and testing, and determine whether remote sites can be used as a vector into the corporate network through VPNs or other private network infrastructure.
• Perform brute force account and password attacks using a database of over 40 million common passwords.
• For resources penetrated, Progent security experts will manually deploy assorted hacker tricks to broaden such exploit vectors to develop a picture of the full network environment and determine how many internal systems can be penetrated and compromised. This class of PEN testing can reveal the actual scope of the exposure of a network.
• Determine internal and external network addressing set up via email beaconing techniques.
• Launch a variety of DoS attacks, in concert with top network management to seewhether it is possible to stop or hinder network productivity. After evidence of impact is reported, such testing can be instantly stopped to avoid seriously affecting operations.
• Perform PBX phone system remote access and voice mail security assessment.
• Provide continuous automatic PEN testing to define your internal and external attack surface and to detect ways that vulnerabilities, misconfigurations, harvested credentials, skipped patches, and dangerous IT product defaults can be chained together by threat actors into the multi-front attacks typical of modern variants of ransomware.

Progent will provide a complete report of methods utilized and vulnerabilities uncovered during stealth PEN testing, along with a detailed list of recommended fixes. Progent can then work with internal IT team members to perform an audit and evaluation of your actual security defense, set up, utilities, and processes and help your business to design and deploy a solid security plan.

ProSight Low-Cost Managed Services for Information Assurance
Progent's affordable ProSight series of network monitoring and management services is intended to provide small and mid-size organizations with enterprise-class support and state-of-the-art technology for all facets of information assurance and compliance. ProSight managed services available from Progent include:

• ProSight Active Security Monitoring (ASM): Next Generation Endpoint Protection and Ransomware Defense
  Progent's ProSight Active Security Monitoring is an endpoint protection solution that utilizes SentinelOne's cutting edge behavior-based machine learning technology to guard endpoints and physical and virtual servers against modern malware attacks like ransomware and email phishing, which routinely get by traditional signature-matching AV tools. ProSight Active Security Monitoring protects on-premises and cloud resources and provides a unified platform to manage the entire malware attack lifecycle including blocking, identification, containment, remediation, and forensics. Top features include single-click rollback with Windows Volume Shadow Copy Service (VSS) and real-time network-wide immunization against new threats. Progent is a SentinelOne Partner, reseller, and integrator. Read more about Progent's ProSight Active Security Monitoring endpoint protection and ransomware recovery with SentinelOne technology.

• ProSight Enhanced Security Protection: Unified Endpoint Protection
  Progent's ProSight Enhanced Security Protection (ESP) managed services deliver economical in-depth security for physical servers and virtual machines, workstations, mobile devices, and Microsoft Exchange. ProSight ESP utilizes adaptive security and modern behavior analysis for continuously monitoring and responding to cyber threats from all vectors. ProSight ESP delivers firewall protection, penetration alerts, device management, and web filtering via leading-edge tools packaged within one agent managed from a unified control. Progent's data protection and virtualization experts can help your business to plan and implement a ProSight ESP deployment that meets your company's unique needs and that helps you prove compliance with legal and industry information protection standards. Progent will help you specify and implement policies that ProSight ESP will manage, and Progent will monitor your network and respond to alarms that require urgent action. Progent's consultants can also help your company to install and verify a backup and restore solution such as ProSight Data Protection Services so you can get back in business rapidly from a destructive cyber attack such as ransomware. Find out more about Progent's ProSight Enhanced Security Protection unified physical and virtual endpoint security and Microsoft Exchange filtering.

• ProSight Data Protection Services: Managed Backup and Recovery
  Progent has partnered with leading backup product vendors to create ProSight Data Protection Services (DPS), a family of subscription-based management offerings that deliver backup-as-a-service. All ProSight DPS products manage and monitor your data backup processes and allow transparent backup and rapid recovery of important files, apps, images, plus VMs. ProSight DPS helps you recover from data loss resulting from hardware failures, natural calamities, fire, cyber attacks like ransomware, human mistakes, malicious insiders, or software bugs. Managed services available in the ProSight Data Protection selection include ProSight DPS Altaro VM Backup, ProSight 365 Total Backup (formerly Altaro Office 365 Backup), ProSight ECHO Backup based on Barracuda purpose-built hardware, and ProSight MSP360 Cloud and On-prem Backup. Your Progent service representative can assist you to determine which of these fully managed services are most appropriate for your IT environment.

• ProSight Email Guard: Spam Filtering, Data Leakage Protection and Email Encryption
  ProSight Email Guard is Progent's email security solution that uses the services and infrastructure of leading data security vendors to deliver centralized control and comprehensive protection for all your email traffic. The hybrid architecture of Email Guard managed service integrates a Cloud Protection Layer with a local gateway appliance to offer advanced defense against spam, viruses, Denial of Service Attacks, Directory Harvest Attacks (DHAs), and other email-based malware. Email Guard's cloud filter acts as a preliminary barricade and keeps the vast majority of threats from making it to your network firewall. This reduces your vulnerability to external threats and saves system bandwidth and storage. Email Guard's on-premises security gateway device adds a further layer of inspection for incoming email. For outbound email, the local gateway offers AV and anti-spam protection, DLP, and encryption. The onsite security gateway can also help Microsoft Exchange Server to monitor and safeguard internal email that stays within your security perimeter. Learn more about Progent's ProSight Email Guard spam filtering, virus blocking, content filtering and data loss protection.

• ProSight WAN Watch: Network Infrastructure Remote Monitoring and Management
  ProSight WAN Watch is a network infrastructure monitoring and management service that makes it simple and affordable for smaller businesses to map, monitor, reconfigure and troubleshoot their networking appliances such as switches, firewalls, and load balancers plus servers, printers, endpoints and other devices. Incorporating state-of-the-art Remote Monitoring and Management (RMM) technology, ProSight WAN Watch ensures that infrastructure topology diagrams are always updated, copies and manages the configuration of almost all devices on your network, tracks performance, and generates alerts when issues are discovered. By automating tedious network management activities, WAN Watch can knock hours off ordinary chores like network mapping, expanding your network, finding appliances that need critical software patches, or isolating performance issues. Find out more details about ProSight WAN Watch network infrastructure management services.

• ProSight LAN Watch: Server and Desktop Remote Monitoring
  ProSight LAN Watch is Progent's server and desktop monitoring service that uses state-of-the-art remote monitoring and management (RMM) techniques to help keep your IT system running efficiently by checking the state of critical assets that drive your information system. When ProSight LAN Watch uncovers a problem, an alarm is sent automatically to your designated IT management personnel and your assigned Progent engineering consultant so any looming issues can be resolved before they can impact productivity Learn more about ProSight LAN Watch server and desktop monitoring consulting.

• ProSight Virtual Hosting: Hosted VMs at Progent's World-class Data Center
  With Progent's ProSight Virtual Hosting service, a small or mid-size business can have its key servers and applications hosted in a secure fault tolerant data center on a high-performance virtual machine host set up and maintained by Progent's network support experts. With the ProSight Virtual Hosting service model, the client owns the data, the operating system platforms, and the applications. Because the environment is virtualized, it can be moved immediately to an alternate hardware solution without a time-consuming and difficult configuration process. With ProSight Virtual Hosting, your business is not tied one hosting provider. Find out more details about ProSight Virtual Hosting services.

• ProSight IT Asset Management: Network Documentation Management
  ProSight IT Asset Management service is an IT infrastructure documentation management service that allows you to create, maintain, find and safeguard information related to your IT infrastructure, procedures, business apps, and services. You can quickly locate passwords or IP addresses and be warned automatically about upcoming expirations of SSLs or warranties. By cleaning up and managing your IT infrastructure documentation, you can eliminate as much as half of time wasted trying to find critical information about your network. ProSight IT Asset Management includes a common repository for storing and collaborating on all documents related to managing your network infrastructure such as recommended procedures and self-service instructions. ProSight IT Asset Management also supports a high level of automation for collecting and relating IT information. Whether you're making improvements, doing regular maintenance, or responding to an emergency, ProSight IT Asset Management delivers the knowledge you need when you need it. Learn more about Progent's ProSight IT Asset Management service.

• Progent's Patch Management: Software/Firmware Update Management Services
  Progent's support services for patch management offer businesses of all sizes a versatile and cost-effective alternative for evaluating, testing, scheduling, implementing, and tracking updates to your dynamic information system. Besides maximizing the protection and functionality of your computer environment, Progent's patch management services permit your in-house IT staff to focus on line-of-business initiatives and activities that deliver maximum business value from your network. Find out more about Progent's software/firmware update management support services.

• ProSight Duo Multi-Factor Authentication: ID Confirmation, Endpoint Remediation, and Secure Single Sign-on
  Progent's Duo MFA managed services incorporate Cisco's Duo technology to defend against password theft through the use of two-factor authentication. Duo supports one-tap identity verification on iOS, Android, and other personal devices. Using 2FA, when you sign into a protected online account and give your password you are asked to confirm your identity via a unit that only you have and that is accessed using a different network channel. A wide range of devices can be utilized for this added means of ID validation such as a smartphone or watch, a hardware/software token, a landline telephone, etc. You can register several validation devices. For more information about Duo identity validation services, see Duo MFA two-factor authentication services.

The ProSight Ransomware Preparedness Report Service
Progent's ProSight Ransomware Preparedness Report service is a low-cost service based on a brief discussion with a Progent information assurance expert. The fact-finding interview is designed to evaluate your company's ability either to block or recover quickly after an attack by a ransomware strain such as Ryuk, WannaCry, MongoLock, or Hermes. Progent will consult with you directly to collect information about your current cybersecurity posture and backup platform, and Progent will then produce a written Basic Security and Best Practices Report detailing how you can apply industry best practices to deploy a cost-effective security and backup environment that aligns with your company's needs. For more information, see Progent's ProSight Ransomware Preparedness Report.

Contact Progent for Penetration Testing Consulting
If you need security consulting, telephone Progent at 800-993-9400 or refer to Contact Progent.

Ransomware 24x7 Hot Line: Call 800-462-8800
Progent's Ransomware 24x7 Hot Line is designed to help organizations to complete the urgent first steps in mitigating a ransomware attack by putting out the fire. Progent's online ransomware expert can assist you to identify and quarantine breached devices and protect clean assets from being compromised. If your system has been penetrated by any strain of ransomware, don't panic. Get immediate help by calling Progent's Ransomware Hot Line at 800-462-8800. For more information, see Progent's Ransomware 24x7 Hot Line.