Cisco Network Consulting

ProSight Duo Access Security
Progent's ProSight Duo catalog of managed services integrates industry-leading access security technology from Duo, a Cisco company, to deliver two-factor ID validation solutions. Two-factor authentication (2FA) is one of the pillars of modern zero-trust cybersecurity strategy. 2FA utilizes different-band ID confirmation to provide a second level of security on top of just passwords. 2FA blocks the most common causes of security break-ins like phishing, brute-force password attacks, and stolen credentials.

Duo's push technology minimizes time and hassle by allowing users to verify who they are just by tapping "Approve" on the authentication box on their personal iOS or Android smartphone or watch. This single-tap procedure eliminates the necessity to retrieve an email or text message and transcribe a passcode manually.

Progent's ProSight Duo catalog includes three subscription services that progressively add features. ProSight Duo MFA allows you to deploy Duo's two-factor authentication platform to guard all users while providing essential policy controls, unified management, and rapid endpoint provisioning. ProSight Duo Access provides all the features of ProSight Duo MFA plus adaptive ID validation policies and endpoint health monitoring. ProSight Duo Beyond adds the ability to identify corporate as opposed to personal devices, block suspect endpoints, and allow users secure and transparent access to your internal apps. Progent is a Duo Managed Service Provider and can help your business to plan, deploy and manage an advanced identity authentication solution that delivers the highest level of security without bogging down your users.

Two-factor Authentication
The vast majority of security break-ins exploit compromised passwords. Each managed service offering in Progent's ProSight Duo suite of access security products can reduce your sole dependence on password protection by allowing two-factor authentication. With 2FA implemented, when you sign into a registered online application and enter your password you are asked to confirm who you are via a device that you have sole ownership of and that runs on a different ("out-of-band") channel. A broad range of devices can be utilized as this second means of ID validation such as an iOS or Android smartphone or wearable, a hardware token, a landline phone, etc. You can register several different validation devices.

Once you confirm who you are via your validation device, you are permitted to run your application or utilize your VPN or remote desktop service. With the Duo Mobile app's push notification feature enabled, you can simply tap "Approve" on your iOS or Android smartphone or watch. This streamlines the sign-on experience by making the verification process nearly instantaneous. For traditional authentication devices, such as a token, you can copy a temporary password.

Plans Offered with ProSight Duo Services
Progent's ProSight Duo line of subscription-based service offerings include ProSight Duo MFA, ProSight Duo Access, and ProSight Duo Beyond. Progent's network security consultants can help you to decide which version of ProSight Duo is the best fit for your environment.

ProSight Duo MFA Features:

• Two-factor authentication
• Duo Mobile to push single-tap identity verification for iOS or Android smartphones and wearables
• ID verification with a U2F USB device or biometrics
• Conventional 2FA with a passcode on a token, mobile device, or issued by an IT administrator
• User self-enrollment and management
• Dashboard of all managed devices connected to protected apps
• Access policy enforcement driven by network, group
• Cloud-based single sign-on for all apps via an MFA-secured dashboard

• All of the capabilities of ProSight Duo
• Unified Endpoint Visibility displays every networked device, not simply managed endpoints
• Highlight and monitor high-risk endpoints
• Duo Device Health apps for laptops and PCs
• Security health visibility for mobile endpoints
• Policy enforcement based on location
• Blocking options for anonymous communication networks such as Tor
• Detection of suspicious or unhealthy networks
• Health-determined policy decisions for laptops, desktops and endpoints
• Prompt users during sigh-on to update their software and cybersecurity configurations

• All the capabilities included with ProSight Duo Access
• Detection of corporate-owned vs. personally owned laptops, desktops and mobile computers
• Identification of 3rd-party software agents such as AV operating on endpoints
• Protected access to on-premises websites/applications and SSH (Secure Shell) servers without requiring VPN credential management
• Confirmation of both user and device trust
• Limit device access to apps determined by membership in endpoint management systems
• Control mobile access to apps based on enrollment in mobile device management systems (MDMs)

Download Importance of Deploying Modern Password Management Tools White Paper
To view or download a white paper about the reasons for utilizing up-to-date password management technology, click:
Importance of Deploying Advanced Password Management Tools White Paper. (PDF - 2.3 MB)

How Progent Can Assist You to Create an 2FA System with ProSight Duo
Progent can help your organization to plan, implement, maintain and troubleshoot a two-factor authentication system based on ProSight Duo managed services. Progent can also help you to incorporate ProSight Duo 2FA services into a unified, comprehensive security strategy by delivering expert support for all aspects of modern cybersecurity tools and services for any mix of cloud, on-prem, work-from-home, and mobile resources and users.

Progent's Cisco-certified CCIE network experts can help you to configure and troubleshoot your Cisco ASA firewalls, Catalyst switches, VPN devices, and other network infrastructure to work with Cisco Duo's ID verification technology. Progent's certified Azure integration experts, Amazon AWS support consultants and Google Cloud Platform consultants can assist your business to bring the security of ProSight Duo 2FA services to your cloud-hosted apps. Progent's teleworker integration specialists can help your organization to plan and configure secure and resilient remote access for your at-home workers.

Progent also offers fast guidance from Exchange Online consultants, SQL Server consultants, and Microsoft 365 integration consultants assist your business to prepare and implement Duo 2FA with your critical workloads. Progent's CISSP-certified cybersecurity experts and CISM-certified network security specialists can help your organization to evaluate and fortify your overall cybersecurity profile. Progent also offers ProSight Active Security Monitoring (ASM) managed services for AI based endpoint security powered by SentinelOne.

Additional Managed Services Available from Progent
In addition to ProSight Duo 2FA services, Progent offers other affordably-priced managed service plans that cover vital components of your information network such as cybersecurity, backup/recovery, and infrastructure management. By working with top-tier technology innovators, Progent can provide small and mid-size organizations the advantages of the identical advanced technology used by worldwide enterprises. Popular managed service plans available from Progent include:

• ProSight LAN Watch: Server and Desktop Monitoring
  ProSight LAN Watch is Progent's server and desktop monitoring service that uses state-of-the-art remote monitoring and management (RMM) technology to keep your network running efficiently by tracking the health of critical computers that drive your business network. When ProSight LAN Watch detects an issue, an alert is transmitted automatically to your designated IT management personnel and your assigned Progent engineering consultant so that any looming issues can be resolved before they can impact productivity. Learn more details about ProSight LAN Watch server and desktop monitoring services.

• ProSight WAN Watch: Network Infrastructure Remote Monitoring and Management
  ProSight WAN Watch is an infrastructure monitoring and management service that makes it easy and affordable for small and mid-sized businesses to map, track, reconfigure and troubleshoot their networking appliances such as routers, firewalls, and load balancers plus servers, printers, endpoints and other devices. Incorporating cutting-edge Remote Monitoring and Management technology, ProSight WAN Watch makes sure that network maps are kept updated, copies and displays the configuration information of virtually all devices on your network, tracks performance, and sends notices when issues are discovered. By automating time-consuming network management processes, ProSight WAN Watch can knock hours off ordinary chores such as network mapping, reconfiguring your network, locating devices that need important software patches, or identifying the cause of performance bottlenecks. Find out more about ProSight WAN Watch network infrastructure management services.

• ProSight Reporting: In-depth Reporting for Ticketing and Network Monitoring Applications
  ProSight Reporting is a growing suite of in-depth reporting tools created to work with the leading ticketing and network monitoring programs including ConnectWise Manage, ConnectWise Automate, Customer Thermometer, Auvik, and SentinelOne. ProSight Reporting uses Microsoft Graph and utilizes color coding to highlight and contextualize key issues like spotty support follow-up or machines with missing patches. By identifying ticketing or network health problems concisely and in near-real time, ProSight Reporting improves productivity, lowers management overhead, and saves money. For details, see ProSight Reporting for ticketing and network monitoring applications.

• ProSight Data Protection Services: Backup and Recovery Services
  Progent has worked with advanced backup technology providers to create ProSight Data Protection Services (DPS), a selection of management outsourcing plans that deliver backup-as-a-service. ProSight DPS products manage and track your backup operations and allow non-disruptive backup and fast recovery of important files/folders, applications, system images, plus VMs. ProSight DPS helps you recover from data loss caused by equipment breakdown, natural disasters, fire, malware like ransomware, human error, ill-intentioned employees, or application bugs. Managed services available in the ProSight Data Protection Services product family include ProSight Altaro VM Backup, ProSight 365 Total Backup (formerly Altaro 365 Backup), ProSight DPS ECHO Backup using Barracuda dedicated hardware, and ProSight MSP360 Cloud and On-prem Backup. Your Progent consultant can help you to determine which of these fully managed backup services are most appropriate for your IT environment.

• ProSight Email Guard: Inbound and Outbound Spam Filtering and Data Leakage Protection
  ProSight Email Guard is Progent's spam and virus filtering service that uses the technology of leading data security companies to deliver web-based control and world-class protection for all your inbound and outbound email. The powerful architecture of Progent's Email Guard managed service combines a Cloud Protection Layer with a local gateway device to provide advanced protection against spam, viruses, Denial of Service Attacks, DHAs, and other email-based threats. Email Guard's cloud filter serves as a first line of defense and blocks most threats from reaching your security perimeter. This reduces your vulnerability to external threats and saves network bandwidth and storage. Email Guard's onsite gateway appliance adds a further layer of inspection for incoming email. For outbound email, the on-premises security gateway provides anti-virus and anti-spam protection, DLP, and email encryption. The onsite security gateway can also assist Microsoft Exchange Server to track and protect internal email traffic that stays within your corporate firewall. For more details, visit Email Guard spam filtering and data leakage protection.

• Progent's Outsourced/Shared Help Center: Help Desk Managed Services
  Progent's Help Desk services allow your information technology team to outsource Support Desk services to Progent or divide responsibilities for support services seamlessly between your in-house support resources and Progent's extensive roster of certified IT support technicians, engineers and subject matter experts. Progent's Shared Service Desk offers a smooth extension of your corporate support team. End user interaction with the Help Desk, provision of technical assistance, issue escalation, ticket generation and tracking, performance metrics, and maintenance of the support database are cohesive regardless of whether incidents are taken care of by your internal support organization, by Progent, or a mix of the two. Read more about Progent's outsourced/shared Service Desk services.

• Active Protection Against Ransomware: Machine Learning-based Ransomware Detection and Cleanup
  Progent's Active Defense Against Ransomware is an endpoint protection (EPP) solution that utilizes cutting edge behavior-based analysis tools to defend endpoints and servers and VMs against modern malware assaults like ransomware and file-less exploits, which routinely evade traditional signature-matching AV tools. Progent Active Security Monitoring services protect local and cloud-based resources and offers a single platform to manage the entire threat progression including blocking, identification, mitigation, cleanup, and forensics. Key capabilities include one-click rollback using Windows Volume Shadow Copy Service (VSS) and automatic system-wide immunization against new threats. Find out more about Progent's ransomware defense and recovery services.

• ProSight IT Asset Management: Network Documentation Management
  ProSight IT Asset Management service is an IT infrastructure documentation management service that allows you to create, update, find and safeguard information about your IT infrastructure, procedures, applications, and services. You can instantly find passwords or serial numbers and be warned about impending expirations of SSLs or domains. By updating and managing your IT infrastructure documentation, you can eliminate up to 50% of time spent trying to find vital information about your IT network. ProSight IT Asset Management features a centralized location for storing and sharing all documents required for managing your network infrastructure such as standard operating procedures and How-To's. ProSight IT Asset Management also supports advanced automation for collecting and relating IT data. Whether you're making improvements, performing regular maintenance, or responding to an emergency, ProSight IT Asset Management gets you the data you need the instant you need it. Find out more about Progent's ProSight IT Asset Management service.

• Progent's Patch Management: Software/Firmware Update Management Services
  Progent's managed services for software and firmware patch management provide businesses of any size a versatile and cost-effective solution for assessing, validating, scheduling, implementing, and documenting software and firmware updates to your dynamic IT network. Besides optimizing the security and functionality of your IT environment, Progent's software/firmware update management services free up time for your IT staff to focus on more strategic projects and activities that deliver the highest business value from your information network. Read more about Progent's patch management support services.

• ProSight Virtual Hosting: Hosted VMs at Progent's World-class Data Center
  With Progent's ProSight Virtual Hosting service, a small or mid-size organization can have its critical servers and apps hosted in a protected fault tolerant data center on a fast virtual host configured and managed by Progent's network support experts. Under the ProSight Virtual Hosting model, the client retains ownership of the data, the operating system software, and the apps. Because the environment is virtualized, it can be moved immediately to a different hardware environment without a time-consuming and difficult configuration procedure. With ProSight Virtual Hosting, your business is not locked into a single hosting service. Find out more about ProSight Virtual Hosting services.

• ProSight Active Security Monitoring: Endpoint Protection and Ransomware Defense
  Progent's ProSight Active Security Monitoring (ASM) is an endpoint protection service that utilizes SentinelOne's next generation behavior machine learning technology to defend physical and virtual endpoint devices against modern malware assaults such as ransomware and file-less exploits, which easily escape traditional signature-matching anti-virus products. ProSight Active Security Monitoring safeguards local and cloud-based resources and offers a single platform to manage the complete malware attack lifecycle including protection, detection, containment, remediation, and post-attack forensics. Key capabilities include single-click rollback with Windows Volume Shadow Copy Service (VSS) and real-time system-wide immunization against newly discovered threats. Progent is a SentinelOne Partner, dealer, and integrator. Learn more about Progent's ProSight Active Security Monitoring next-generation endpoint protection and ransomware defense.

• ProSight Enhanced Security Protection: Physical and Virtual Endpoint Security and Microsoft Exchange Filtering
  Progent's ProSight Enhanced Security Protection (ESP) managed services offer affordable in-depth security for physical and virtual servers, workstations, mobile devices, and Microsoft Exchange. ProSight ESP uses adaptive security and advanced heuristics for round-the-clock monitoring and responding to security assaults from all vectors. ProSight ESP offers two-way firewall protection, intrusion alerts, endpoint control, and web filtering via cutting-edge technologies packaged within a single agent accessible from a unified console. Progent's data protection and virtualization experts can assist your business to plan and configure a ProSight ESP environment that addresses your organization's specific requirements and that allows you achieve and demonstrate compliance with government and industry information protection regulations. Progent will assist you define and configure policies that ProSight ESP will enforce, and Progent will monitor your network and react to alarms that require immediate attention. Progent can also help you to install and verify a backup and disaster recovery solution like ProSight Data Protection Services (DPS) so you can recover quickly from a potentially disastrous security attack such as ransomware. Learn more about Progent's ProSight Enhanced Security Protection (ESP) unified endpoint protection and Microsoft Exchange email filtering.