PC Desktop Support Expertise

Progent's Active Security Monitoring services feature advanced behavior analysis and AI heuristics by SentinelOne to offer state-of-the-art protection for endpoints as well as virtual and physical servers. This modern approach to malware defense addresses the new generation of cyber attacks, such as ransomware, which routinely evade detection by legacy signature-based AV technology. Progent is a SentinelOne Partner, dealer, and integrator.

Progent's ProSight Active Security Monitoring offers small and medium-sized businesses the benefits of the same AV tools deployed by some of the world's biggest corporations including Walmart, Visa, and NASDAQ. By delivering real-time malware blocking, classification, mitigation, recovery and forensics in one integrated platform, Progent's ProSight Active Security Monitoring cuts total cost of ownership, streamlines management, and expedites resumption of operations. The next-generation endpoint protection engine built into in ProSight Active Security Monitoring was ranked by Gartner Group as the industry's "most visionary Endpoint Protection Platform."

Progent's Active Security Monitoring online services utilize a small-footprint agent running on every protected device in order to form a dynamic cybersecurity matrix that responds to suspected attacks instantly and orchestrates cohesive protection featuring:

• Instant protection for Windows, Mac, Linux, iOS and Android machines
• Protection for virtual machines powered by Hyper-V, VMware vSphere, and Citrix XenServer virtualization systems
• In-depth OS-level monitoring
• Signature-independent heuristics and automation
• Cutting-edge behavioral analysis
• Ability to spot new generation threats from all sources
• Automated after-attack containment
• Single-click rollback to last secure state following a crypto-ransomware assault including Ryuk, Maze, Sodinokibi, DopplePaymer, Snatch or Nephilim
• Instant no-touch immunization across the complete matrix of enrolled machines
• Immediate visualization of an assault's progression through your network
• Comprehensive forensics for recognizing vulnerabilities
• Centralized browser-based administration tool
• Compliant with HIPAA and PCI

ProSight Active Security Monitoring and the Current Cybersecurity Landscape
Most ransomware break-ins could have been prevented by modern security tools. But inevitably, some attacks will succeed despite the most well-planned protective measures. The modern security environment is too filled with relentless bad actors, including government-sponsored adversaries, for any organization to be entirely safe. Given this reality, Progent's ProSight ASM is intended not simply to prevent ransomware from breaching your information network, but also to respond decisively to any detected penetration. This includes instant quarantine of infected devices, automatic threat cleanup, machine-speed immunization of all machines by means of local agents, single-click restore to a safe state and extensive forensics to help you understand how to enhance your security profile to ward off future assaults. By delivering leading-edge defenses during all phases of a malware attack, Progent's ProSight ASM represents an end-to-end solution for surviving today's increasingly dire security environment and escaping the financial and public image loss associated with a major security exploit.

Endpoint devices such as desktops, notebooks and phones are the most vulnerable and most typically attacked components of an information system. ProSight Active Security Monitoring services offer a single endpoint protection platform to manage the full lifecycle of a malicious assault including blocking, identification, containment, cleanup and forensics. Threats recognized by Progent's Active Security Monitoring include:

• File-based malware such as crypto-ransomware, trojans, and payload-based attacks
• File-less and memory-only malware without disk-resident indicators
• Document-carried malware incorporated in malicious macros and Microsoft Office and Adobe files
• Phishing and spear phishing email-based attacks which are responsible for a high percentage of cybersecurity breaches
• Web browser-delivered attacks integrated in inadvertent downloads, Java, JavaScript, VBScript, html5, and malicious plug-ins
• Live attacks based on scripts like PowerShell, Powersploit, and VBScript
• Credential-centric assaults such as credential-scraping, and mimikatz

Next-generation anti-virus tools supplement traditional signature matching with behavior analysis. This technique examines the activity of a potential threat and determines if the activity is normal and innocuous or abnormal and potentially dangerous. For example, does the code under observation affect an unusually large set of processes? Does it alter the registry? Does it log keystrokes? Essentially, behavior monitoring concentrates on potentially dangerous activities instead of on a fixed signature, which a hacker can quickly get around simply by changing a few inconsequential bytes of malware code.

Prevention: Prior to the Break-in
New threats are being created quickly enough to swamp the ability of signature-based anti-virus labs. The market began to recognize the shortcomings of signature-matching endpoint protection around 2012. Since then the situation has become worse.

Progent's ProSight Active Security Monitoring uses modern cloud-based anti-virus centers and reputation services from leading vendors to block recognized threats. This added to deep file analysis and shared blacklisting and whitelisting give Progent's ProSight ASM an edge over old-school AV products. However, prevention is only the first phase of modern anti-virus defense. Modern exploits, file-less and script-dependent assaults easily slip by signature-matching defenses. For instance, threat actors often use a packing technique to compress a malicious file's format so cybersecurity labs and anti-virus software are unable to recognize the attack.

Detection and Response: During the Assault
The second phase of the endpoint protection process involves reacting to an attack while the malware code is executing following a break-in. Progent's ProSight Active Security Monitoring utilizes advanced EPP technology to detect malware activity resulting from any attack that breaks through the initial line of defense. In order to compromise information, even file-free threats like memory-based malware perform red-flag actions like as making an executable file with no permission. ProSight ASM's compact embedded agent monitors activity in each protected device and uses modern behavioral analysis and deep execution context to recognize new attacks as soon as they start. When an attack is detected, Progent's Active Security Monitoring at once quarantines the impacted endpoint from the network to contain the impact. Since the ProSight Active Security Monitoring software agent operates independently, endpoint devices remain secured even if they are not connected to the Internet.

Cleanup: After a Penetration
After containing a malware attack, ProSight ASM initiates the remediation phase of protection. If Progent's ASM is implemented with Windows VSS, modifications to data caused by a malware assault can be immediately returned to a trusted state with one click. Progent's ASM also logs all system-level files and settings that were altered by the assault and what files were restored. Any time Progent's ProSight Active Security Monitoring uncovers a new malicious binary, the code is flagged and any machines on the network that are secured by software agents are immunized against the latest attack. Also, the Progent's ProSight ASM management tool provides extensive forensics such as an informative visualization of the attack's progress across the network from beginning to end. This audit trail of how an assault progressed within the network assists your IT staff to assess the impact and brings to light weaknesses in security policies or processes that need to be rectified to prevent future break-ins.

Download the ProSight ASM Datasheet
To download a PDF datasheet about the key features and benefits of Progent's ProSight Active Security Monitoring services, click:
Progent's ProSight Active Security Monitoring Ransomware Protection Services Datasheet. (PDF - 89 KB)

Contact Progent about ProSight Active Security Monitoring Services
To find out more about how Progent can help your business set up an affordable and efficient ransomware protection solution with Progent's Active Security Monitoring service, call 1-800-462-8800 or visit Contact Progent.