IT Connection Newsletter: Number 6

Penetration testing is the accepted method for enterprises to assess their exposure to cyber attack. Progent's penetration testing packages combine advanced remote scanning technology plus the expertise of Progent's seasoned security engineers to offer big-company security evaluations at prices companies of any size can afford.

Security breaches continue to make the headlines as attacks compromise the databases of some of the most prestigious organizations. How hard would it be for a hacker to break into your network? Have you paid enough attention to blocking attacks launched from inside your firewall? Are there fast and inexpensive ways to verify your information system is safe?.

Progent's certified security engineers have developed a set of affordable fixed-price service packages to scan your network for security gaps, report the results, and suggest effective, budget-friendly remediation procedures.

What Is Penetration Testing?
Penetration testing is the accepted method for enterprises to assess their exposure to cyber attack. With penetration testing, the "good guys" use the latest hacking tools and techniques to try to "break into" their own networks. For more objective results, penetration testing is typically performed by trusted third parties, and until now it has been prohibitively expensive for smaller businesses. Progent's penetration testing packages combine advanced remote scanning technology plus the expertise of Progent's seasoned security engineers to offer big-company security evaluations at prices small companies can afford.

Progent's Security Penetration Testing Packages
Progent offers External and Internal security scanning packages, each of which can be run at different levels of intensity. All packages include scanning, analysis, reporting, and recommendations. The scanning phase is managed remotely from a secure Progent site, saving time and money without sacrificing thoroughness. For an added fee, Progent offers onsite testing nationwide.

The data collected is analyzed by Progent's security team, which includes engineers certified by standards organizations such as the Information Systems Audit and Control Association and the SANS Institute.

As part of each package, Progent prepares executive and technical reports that summarize the results of the vulnerability scan and suggest mitigation procedures. Each package also includes executive and technical outbriefing sessions with a Progent security engineer. Suggestions for improvements are clear and actionable, so they can be performed by Progent or by any qualified security consultant. If any remedial work is requested to be performed by Progent, the work will be treated as a separate project.

Three Levels of Testing
Progent's security vulnerability scanning packages are available in three levels which vary in intensity from friendly, co-operative testing to aggressive testing that mimics the activities of hackers. Level 1 testing, which is the least expensive, scans for potential security gaps but does not verify or exploit them. Level 2 testing is more aggressive and tries to exploit and expand the vulnerabilities found. Level 3 testing pulls out all the stops and includes Phishing attacks, malicious email, MITM attacks, pillaging compromised devices, social engineering, and testing of controls.

An important option for Progent's External Penetration Testing is web application analysis. Progent's security engineers use advanced, automated tools and manual examination to scan your web application for common vulnerabilities.

For additional information about Progent's security penetration testing packages, see Progent's Stealth Penetration Testing Services.

Find Out More About Progent's Cisco IOS Software Support
To find out more about Progent's remote security scans, call Progent at 1-800-993-9400 or visit Contact Progent.

Click here to go to the table of contents of the IT Connection newsletter.