Computer Security and Compliance

ProSight Duo Identity Verification and Management Services
Progent's ProSight Duo family of managed services incorporates industry-leading technology from Duo, a Cisco company, to deliver two-factor authentication solutions. Two-factor authentication (2FA) is one of the foundations of modern zero-trust cybersecurity design. 2FA uses out-of-band identity validation to provide a second layer of protection beyond just passwords. This protects against the most common causes of cybersecurity breaches such as phishing, social engineering, brute-force password attacks, and stolen credentials.

Duo's push technology saves time and hassle by allowing users to verify their identity simply by tapping "Approve" on the authentication prompt on their personal smart phone or watch. This one-tap process eliminates the need to open an email or text message and transcribe a security code manually.

Progent's ProSight Duo suite consists of three subscription-based security services that build on one another. ProSight Duo MFA allows you to deploy Duo's two-factor authentication (2FA) service to protect all users while providing essential access controls, advanced management, and rapid provisioning. ProSight Duo Access includes all the features of ProSight Duo MFA plus adaptive authentication policies and extensive endpoint health monitoring. ProSight Duo Beyond adds the ability to identify corporate as distinct from personal devices, block untrusted devices, and give users secure and seamless access to your internal applications. Progent is a certified Duo Managed Service Provider and can help you design, deploy and manage a modern identity validation solution that provides the highest level of security without bogging down your users.

Two-factor Authentication
80% of security breaches involve compromised passwords. All service offerings in Progent's ProSight Duo line of access security products can do away with your sole reliance on passwords by supporting two-factor authentication. With 2FA activated, when you log into a protected online account and enter your password you are asked to verify your identity via a device that only you possess and that uses a different ("out-of-band") network channel. A broad range of devices can be used as a second form of authentication including a smart phone or watch, a hardware or software token, a landline phone, etc. You can register multiple verification devices.

Once you confirm your identity using your out-of-band device, you are permitted to run your application or access your VPN or remote desktop service. With the Duo Mobile app's push notification enabled, you can simply press "Approve" on your iOS or Android phone or smart watch. This streamlines the login experience by making the authentication process virtually instantaneous. For other secondary devices, such as a hardware token, you can transcribe a temporary passcode.

Products Available with ProSight Duo Managed Services
Progent's ProSight Duo line of subscription-based managed service offerings consist of ProSight Duo MFA, ProSight Duo Access, and ProSight Duo Beyond. Progent's cybersecurity experts can help you determine which version of ProSight Duo is the best fit for your environment.

ProSight Duo MFA Features:

• Two-factor Authentication
• Duo Mobile to push single-tap authentication for Android, iOS, Apple Watch
• Authentication via a Universal 2nd Factor (U2F) USB device or biometrics
• Traditional 2FA via a passcode generated by a token, mobile device, or network administrator
• User self-enrollment and self-management
• Dashboard of all devices accessing apps
• Policy enforcement based on application, network, user group
• Cloud-based single sign-on (SSO) for all apps via an MFA-protected dashboard

• All the features of ProSight Duo
• Unified Endpoint Visibility shows every networked device, not just managed devices
• Flag and track high-risk devices
• Duo Device Health application for laptops and desktops
• Security health visibility for mobile devices
• Policy enforcement based on geo-location
• Blocking options for anonymous networks like Tor
• Detection of high-risk or problem networks
• Health-based policy enforcement for laptops, desktops and mobile devices
• Prompt users during login to update their software and security settings

• All the features of ProSight Duo Access
• Detection of corporate-owned vs. BYOD laptops, desktops and mobile devices
• Detection of third-party agents such as anti-virus running on devices
• Secure access to on-prem websites/apps and SSH servers without requiring VPN credential management
• Verification of both user and device trust
• Limit device access to apps based on enrollment in endpoint management systems
• Limit mobile access to apps based on enrollment in mobile device management systems (MDMs)

How Progent Can Help You Build an MFA Solution with ProSight Duo
Progent can help you plan, deploy, test and troubleshoot a two-factor authentication solution based on ProSight Duo managed services. Progent can also help you integrate ProSight Duo 2FA services into a cohesive, company-wide cybersecurity strategy by providing expertise in all aspects of modern security technology for any mix of cloud, on-premises, at-home, and mobile environments.

Progent's Cisco-certified CCIE network engineers can help you set up your Cisco firewalls, switches, VPN devices and other infrastructure to support Duo's identity authentication services. Progent's certified Azure experts, AWS consultants and Google Cloud Platform consultants can help you add the security of ProSight Duo two-factor authentication to your cloud-hosted applications and services. Progent's work-from-home specialists can help you set up secure and reliable remote access for your teleworkers.

Progent can also provide the support of O365 Exchange consultants, SQL Server experts, and Microsoft 365 consultants to help you plan and deploy Duo 2FA with your key applications. Progent's CISSP-certified cybersecurity consultants and CISM-certified network security experts can help you review and fortify your corporate-wide security posture. Progent also offers ProSight Active Security Monitoring services for AI-based endpoint protection.

Additional Managed Services Available from Progent
In addition to ProSight Duo identity authentication services, Progent offers other affordably-priced managed service packages that address key components of your information system such as security, backup/recovery, and network infrastructure management. By partnering with leading technology innovators, Progent can offer small and mid-size businesses the benefits of the same advanced technology used by global enterprises. Managed services available from Progent include:

• ProSight Active Security Monitoring: Endpoint Protection and Ransomware Defense
  ProSight Active Security Monitoring (ASM) is an endpoint protection (EPP) service that utilizes next generation behavior machine learning technology to defend physical and virtual endpoint devices against new malware assaults such as ransomware and file-less exploits, which easily get by legacy signature-based anti-virus products. ProSight ASM protects local and cloud-based resources and offers a unified platform to manage the entire threat lifecycle including protection, infiltration detection, mitigation, cleanup, and post-attack forensics. Key capabilities include one-click rollback using Windows Volume Shadow Copy Service (VSS) and real-time system-wide immunization against newly discovered threats. Learn more about Progent's ProSight Active Security Monitoring next-generation endpoint protection and ransomware defense.

• ProSight Enhanced Security Protection (ESP): Endpoint Protection and Exchange Filtering
  ProSight Enhanced Security Protection (ESP) managed services offer affordable multi-layer protection for physical servers and virtual machines, workstations, smartphones, and Exchange email. ProSight ESP utilizes adaptive security and modern behavior analysis for round-the-clock monitoring and reacting to cyber threats from all attack vectors. ProSight ESP provides firewall protection, intrusion alarms, device control, and web filtering through cutting-edge technologies packaged within a single agent managed from a single console. Progent's security and virtualization consultants can assist your business to design and configure a ProSight ESP environment that addresses your company's unique requirements and that allows you demonstrate compliance with government and industry data protection standards. Progent will assist you define and implement policies that ProSight ESP will manage, and Progent will monitor your network and react to alerts that require immediate action. Progent's consultants can also assist your company to set up and verify a backup and restore system such as ProSight Data Protection Services so you can get back in business rapidly from a destructive security attack like ransomware. Read more about Progent's ProSight Enhanced Security Protection (ESP) unified physical and virtual endpoint security and Microsoft Exchange email filtering.

• ProSight Data Protection Services: Backup and Disaster Recovery Services
  Progent has partnered with advanced backup/restore software providers to produce ProSight Data Protection Services (DPS), a family of subscription-based offerings that deliver backup-as-a-service (BaaS). ProSight DPS products manage and monitor your backup processes and allow non-disruptive backup and fast restoration of vital files, applications, system images, plus VMs. ProSight DPS helps you avoid data loss caused by equipment breakdown, natural calamities, fire, cyber attacks such as ransomware, user mistakes, malicious insiders, or application glitches. Managed backup services available in the ProSight Data Protection Services product line include ProSight DPS Ataro VM Backup, ProSight Ataro Office 365 Backup, ProSight ECHO Backup using Barracuda purpose-built hardware, and ProSight MSP360 Hybrid Backup. Your Progent consultant can assist you to identify which of these managed backup services are most appropriate for your IT environment.

• ProSight WAN Watch: Infrastructure Remote Monitoring and Management
  Progent’s ProSight WAN Watch is an infrastructure monitoring and management service that makes it easy and affordable for small and mid-sized organizations to map out, monitor, reconfigure and debug their connectivity appliances such as switches, firewalls, and wireless controllers plus servers, endpoints and other devices. Using state-of-the-art RMM technology, WAN Watch makes sure that network diagrams are kept current, captures and manages the configuration of almost all devices connected to your network, tracks performance, and generates notices when problems are discovered. By automating complex management processes, ProSight WAN Watch can knock hours off ordinary tasks such as making network diagrams, reconfiguring your network, finding appliances that need critical software patches, or resolving performance bottlenecks. Learn more about ProSight WAN Watch infrastructure management services.

• ProSight LAN Watch: Server and Desktop Monitoring
  ProSight LAN Watch is Progent’s server and desktop remote monitoring service that uses state-of-the-art remote monitoring and management (RMM) techniques to help keep your IT system running at peak levels by tracking the health of critical assets that power your information system. When ProSight LAN Watch detects an issue, an alert is transmitted immediately to your specified IT management staff and your assigned Progent consultant so that any looming problems can be resolved before they can disrupt your network. Find out more details about ProSight LAN Watch server and desktop monitoring services.

• ProSight IT Asset Management: Network Documentation Management
  Progent's ProSight IT Asset Management service is an IT infrastructure documentation management service that allows you to create, update, retrieve and safeguard information related to your IT infrastructure, procedures, applications, and services. You can quickly locate passwords or IP addresses and be warned about upcoming expirations of SSLs or domains. By updating and organizing your network documentation, you can save as much as half of time spent searching for critical information about your IT network. ProSight IT Asset Management includes a common repository for storing and collaborating on all documents related to managing your network infrastructure such as recommended procedures and self-service instructions. ProSight IT Asset Management also offers a high level of automation for collecting and associating IT information. Whether you’re making enhancements, performing maintenance, or reacting to an emergency, ProSight IT Asset Management gets you the information you need the instant you need it. Read more about Progent's ProSight IT Asset Management service.

• Active Defense Against Ransomware: AI-based Ransomware Detection and Cleanup
  Progent's Active Protection Against Ransomware is an endpoint protection (EPP) solution that incorporates cutting edge behavior-based machine learning tools to defend endpoints and physical and virtual servers against new malware assaults like ransomware and file-less exploits, which routinely get by traditional signature-matching AV tools. Progent ASM services protect local and cloud-based resources and offers a unified platform to address the complete threat lifecycle including blocking, infiltration detection, mitigation, cleanup, and post-attack forensics. Key capabilities include one-click rollback with Windows Volume Shadow Copy Service (VSS) and real-time system-wide immunization against newly discovered attacks. Learn more about Progent's ransomware defense and cleanup services.

• Outsourced/Co-managed Call Center: Support Desk Managed Services
  Progent's Help Center services enable your IT staff to outsource Call Center services to Progent or split responsibilities for support services seamlessly between your in-house support group and Progent's extensive pool of certified IT service technicians, engineers and subject matter experts (SBEs). Progent's Co-managed Help Desk Service offers a transparent extension of your core network support group. Client access to the Service Desk, provision of technical assistance, problem escalation, trouble ticket generation and updates, efficiency measurement, and maintenance of the support database are consistent whether incidents are resolved by your in-house IT support staff, by Progent, or both. Read more about Progent's outsourced/shared Help Center services.

• Progent's Patch Management: Patch Management Services
  Progent's support services for software and firmware patch management provide organizations of any size a versatile and affordable alternative for evaluating, testing, scheduling, applying, and tracking updates to your dynamic information network. Besides maximizing the protection and functionality of your computer network, Progent's software/firmware update management services free up time for your in-house IT staff to focus on more strategic initiatives and activities that deliver the highest business value from your information network. Read more about Progent's software/firmware update management support services.