IT Network Support for Small and Mid-size Businesses

Stealth penetration testing (PEN testing) is a key means of enabling companies to find out how exposed their networks are to real world attacks by displaying how well their current security processes hold up against authorized but unannounced attacks by veteran cyber security specialists using the latest hacking tools and techniques. Progent can provide on-demand penetration testing or ongoing penetration testing delivered as a managed service.

Progent's cyber security experts can safely carry out extensive penetration testing without warning a client's IT staff. Such testing reveals whether your current security monitoring tools and processes such as intrusion alarms and event log monitoring are properly set up and actively managed.

Penetration testing can include any of these areas:

• Use a series of port scanning utilities to identify open network connection vectors and to identify and profile a client's network infrastructure and general security level.
• Run a series of threat identification tools that examine all open connection vectors against a large database of known vulnerabilities caused by servers that are not up to date on security patches, outdated firmware/software, misconfigured servers and devices, and default or common installation passwords.
• Evaluate wireless network security by trying to gain local access from publicly accessible locations such as parking areas, hallways, restrooms, and physically attached areas. Identification of security methods utilized by WiFi infrastructure and executing known exploit utilities to gain access.
• Try to determine remote access capabilities of the network and perform exploit and brute force techniques to get access through remote access infrastructure.
• Perform remote office security evaluation and testing, and determine whether remote sites can be used as a vector into the corporate network through VPNs or other private network infrastructure.
• Perform brute force identity and password attacks using a database of more than 40 million common passwords.
• For resources successfully penetrated, Progent security experts will manually deploy various hacker tricks to expand such exploit vectors to gain a picture of the complete network environment and see how many internal systems can be penetrated and exploited. This type of PEN testing can expose the real scope of the exposure of a network environment.
• Determine internal and external network addressing set up via email beaconing techniques.
• Perform a variety of DoS attacks, coordinated with senior network management to determineif it is possible to halt or hinder network operation. Once proof of impact is recognized, such activity can be instantly ceased to avoid seriously affecting business productivity.
• Carry out PBX phone system remote access and voice mail security testing.
• Implement continuous autonomous PEN testing to map your internal and external attack surface and to detect ways that vulnerabilities, improper configurations, compromised credentials, missing patches, and ill-advised IT product defaults can be combined by hackers into the multi-front attacks typical of modern versions of ransomware.

Progent will provide a complete report of techniques used and vulnerabilities uncovered during stealth PEN testing, along with a comprehensive list of suggested remediation steps. Progent can then cooperate with internal IT staff to carry out an audit and evaluation of your actual security protection, set up, tools, and processes and assist your business to design and implement a solid security plan.

ProSight Fixed-price Managed Services for Information Assurance
Progent's value-priced ProSight line of network management outsourcing services is intended to provide small and mid-size businesses with enterprise-class support and cutting-edge technology for all facets of information assurance. ProSight managed services available from Progent include:

• ProSight Active Security Monitoring (ASM): Endpoint Protection and Ransomware Defense
  Progent's ProSight Active Security Monitoring (ASM) is an endpoint protection solution that incorporates SentinelOne's next generation behavior-based analysis technology to guard endpoint devices and physical and virtual servers against modern malware attacks such as ransomware and email phishing, which routinely escape legacy signature-based AV products. ProSight ASM safeguards local and cloud resources and offers a unified platform to automate the entire malware attack progression including blocking, identification, containment, remediation, and post-attack forensics. Key capabilities include one-click rollback with Windows Volume Shadow Copy Service and automatic system-wide immunization against new attacks. Progent is a SentinelOne Partner, dealer, and integrator. Learn more about Progent's ProSight Active Security Monitoring next-generation endpoint protection and ransomware defense with SentinelOne technology.

• ProSight Enhanced Security Protection: Unified Physical and Virtual Endpoint Protection
  ProSight Enhanced Security Protection (ESP) managed services offer economical in-depth protection for physical servers and virtual machines, desktops, mobile devices, and Exchange Server. ProSight ESP uses contextual security and advanced machine learning for continuously monitoring and reacting to security threats from all attack vectors. ProSight ESP delivers firewall protection, intrusion alerts, endpoint control, and web filtering via cutting-edge tools packaged within a single agent accessible from a unified console. Progent's security and virtualization experts can assist you to plan and implement a ProSight ESP deployment that meets your company's specific requirements and that helps you achieve and demonstrate compliance with legal and industry information security regulations. Progent will help you specify and implement policies that ProSight ESP will enforce, and Progent will monitor your IT environment and respond to alerts that require urgent action. Progent can also help you to install and test a backup and restore solution such as ProSight Data Protection Services so you can recover rapidly from a destructive cyber attack like ransomware. Read more about Progent's ProSight Enhanced Security Protection (ESP) unified physical and virtual endpoint protection and Microsoft Exchange filtering.

• ProSight DPS: Managed Backup and Recovery
  Progent has partnered with advanced backup/restore product companies to create ProSight Data Protection Services, a portfolio of management offerings that provide backup-as-a-service. All ProSight DPS services manage and track your backup operations and allow non-disruptive backup and fast restoration of critical files/folders, apps, system images, and virtual machines. ProSight DPS lets your business protect against data loss resulting from equipment failures, natural calamities, fire, cyber attacks such as ransomware, user error, ill-intentioned employees, or application glitches. Managed backup services in the ProSight DPS product line include ProSight DPS Altaro VM Backup, ProSight 365 Total Backup (formerly Altaro Office 365 Backup), ProSight DPS ECHO Backup based on Barracuda purpose-built hardware, and ProSight MSP360 Hybrid Backup. Your Progent service representative can assist you to determine which of these managed services are best suited for your IT environment.

• ProSight Email Guard: Inbound and Outbound Spam Filtering, Data Leakage Protection and Content Filtering
  ProSight Email Guard is Progent's email security platform that uses the technology of leading data security companies to provide centralized control and world-class protection for all your email traffic. The powerful structure of Email Guard integrates a Cloud Protection Layer with an on-premises gateway appliance to offer advanced protection against spam, viruses, Denial of Service (DoS) Attacks, Directory Harvest Attacks, and other email-based malware. The cloud filter acts as a preliminary barricade and blocks most unwanted email from making it to your security perimeter. This reduces your vulnerability to external threats and conserves network bandwidth and storage. Email Guard's onsite security gateway device provides a further layer of inspection for inbound email. For outgoing email, the local gateway offers AV and anti-spam protection, protection against data leaks, and encryption. The on-premises gateway can also assist Exchange Server to track and protect internal email that stays within your security perimeter. Learn more about Progent's ProSight Email Guard spam filtering, virus defense, content filtering and data leakage protection.

• ProSight WAN Watch: Infrastructure Remote Monitoring and Management
  Progent's ProSight WAN Watch is a network infrastructure monitoring and management service that makes it simple and inexpensive for small and mid-sized organizations to map out, track, optimize and troubleshoot their connectivity appliances such as switches, firewalls, and access points as well as servers, printers, endpoints and other devices. Using state-of-the-art RMM technology, WAN Watch makes sure that infrastructure topology diagrams are kept updated, copies and displays the configuration of almost all devices connected to your network, tracks performance, and sends alerts when problems are discovered. By automating complex network management processes, WAN Watch can knock hours off common tasks like making network diagrams, expanding your network, locating appliances that need important updates, or resolving performance problems. Learn more about ProSight WAN Watch infrastructure monitoring and management consulting.

• ProSight LAN Watch: Server and Desktop Monitoring and Management
  ProSight LAN Watch is Progent's server and desktop monitoring managed service that incorporates advanced remote monitoring and management (RMM) techniques to keep your IT system running efficiently by checking the state of critical computers that power your information system. When ProSight LAN Watch uncovers a problem, an alert is transmitted immediately to your specified IT staff and your assigned Progent consultant so that any looming issues can be resolved before they can disrupt your network Find out more details about ProSight LAN Watch server and desktop remote monitoring services.

• ProSight Virtual Hosting: Hosted Virtual Machines at Progent's World-class Data Center
  With ProSight Virtual Hosting service, a small business can have its critical servers and apps hosted in a secure fault tolerant data center on a high-performance virtual machine host configured and managed by Progent's IT support professionals. With the ProSight Virtual Hosting model, the client retains ownership of the data, the operating system software, and the apps. Since the system is virtualized, it can be ported immediately to an alternate hosting solution without a time-consuming and difficult configuration procedure. With ProSight Virtual Hosting, your business is not tied a single hosting service. Find out more details about ProSight Virtual Hosting services.

• ProSight IT Asset Management: Network Documentation Management
  ProSight IT Asset Management service is a cloud-based IT documentation management service that allows you to create, update, retrieve and protect information related to your network infrastructure, procedures, applications, and services. You can quickly find passwords or IP addresses and be alerted about impending expirations of SSL certificates or domains. By updating and managing your IT documentation, you can save as much as half of time wasted trying to find vital information about your IT network. ProSight IT Asset Management includes a common location for holding and collaborating on all documents related to managing your network infrastructure such as standard operating procedures (SOPs) and self-service instructions. ProSight IT Asset Management also supports a high level of automation for collecting and relating IT information. Whether you're making enhancements, performing maintenance, or reacting to an emergency, ProSight IT Asset Management delivers the data you require when you need it. Find out more details about Progent's ProSight IT Asset Management service.

• Progent's Patch Management: Patch Management Services
  Progent's managed services for patch management offer organizations of all sizes a versatile and cost-effective solution for evaluating, testing, scheduling, implementing, and documenting software and firmware updates to your ever-evolving information network. In addition to optimizing the protection and reliability of your IT environment, Progent's software/firmware update management services permit your IT team to focus on line-of-business initiatives and activities that deliver the highest business value from your network. Read more about Progent's patch management services.

• ProSight Duo Multi-Factor Authentication: ID Confirmation, Endpoint Policy Enforcement, and Secure Single Sign-on (SSO)
  Progent's Duo authentication managed services utilize Cisco's Duo technology to protect against compromised passwords by using two-factor authentication (2FA). Duo supports one-tap identity confirmation with iOS, Android, and other personal devices. Using Duo 2FA, when you sign into a secured online account and give your password you are requested to confirm your identity via a device that only you have and that is accessed using a different network channel. A broad range of devices can be used for this second form of authentication including a smartphone or wearable, a hardware/software token, a landline telephone, etc. You can designate several verification devices. To find out more about Duo identity validation services, visit Duo MFA two-factor authentication (2FA) services.

Progent's ProSight Ransomware Preparedness Report
Progent's ProSight Ransomware Preparedness Report service is an affordable service built around a phone interview with a Progent information assurance expert. The fact-finding interview is designed to evaluate your company's preparedness either to stop or recover quickly following an assault by a ransomware variant like Ryuk, WannaCry, MongoLock, or Hermes. Progent will consult with you directly to gather information about your current security profile and backup system, and Progent will then produce a custom Basic Security and Best Practices Report describing how you can follow best practices to deploy a cost-effective security and backup system that meets your company's needs. For additional information, visit The ProSight Ransomware Preparedness Report Service.

Contact Progent for Penetration Testing Consulting
If you're trying to find security help, phone Progent at 800-993-9400 or see Contact Progent.

Ransomware 24x7 Hot Line: Call 800-462-8800
Progent's Ransomware 24x7 Hot Line is designed to guide organizations to carry out the time-critical first steps in responding to a ransomware assault by containing the malware. Progent's online ransomware engineer can help businesses to locate and isolate infected servers and endpoints and protect undamaged assets from being penetrated. If your network has been breached by any strain of ransomware, act fast. Get help quickly by calling Progent's Ransomware Hot Line at 800-462-8800. For details, see Progent's Ransomware 24x7 Hot Line.