Computer Security and Compliance

Progent's ProSight Active Security Monitoring services incorporate behavior-based detection technology from SentinelOne to provide endpoint and server protection from modern malware attacks such as ransomware, which have demonstrated the ability to evade legacy, signature-based anti-virus defenses. ProSight ASM gives small and mid-sized organizations access to the same threat protection platform used by leading enterprises including Walmart, Netflix, Visa, Citi, NASDAQ, Salesforce and others. By delivering real-time threat prevention, detection, removal and recovery in one unified package, ProSight ASM cuts ownership costs, simplifies management, and speeds up recovery. SentinelOne's next-generation endpoint protection (NGEP) technology used by ProSight ASM was rated by Gartner Group as the most visionary Endpoint Protection Platform in the industry. Progent is a SentinelOne Partner, reseller, and integrator.

Progent's ProSight Active Security Monitoring services utilize a low-overhead agent installed on each protected endpoint and server to build a cohesive security grid that responds to threats at machine speed and allows coordinated and decisive incident response featuring:

• Protection for Windows, Mac OS X and macOS, Linux, iOS and Android endpoints and servers
• Support for Windows Hyper-V, VMware vSphere, and Citrix XenServer virtual environments
• Deep system-level monitoring
• Signature-less machine learning and intelligent automation
• Behavioral analysis and detection of advanced attacks across all vectors
• Full remediation with auto-removal of detected attacks
• Single-click rollback from ransomware and other attacks
• Automatic, network-wide immunization
• Real-time visualization of the attack storyline for comprehensive forensics
• Unified control via a single management console
• HIPAA and PCI certification

Progent offers ProSight Active Security Monitoring as a low-cost, flat-rate monthly service. A software-only EPP solution, ProSight ASM requires no special hardware or other costly upfront investment. ProSight ASM can provide protection for both on-premises and cloud-based resources. In the event that you suffer an attack, Progent is qualified to act as your red team to help you use ProSight ASM to contain and remove the threat, assess the damage, rollback your network to a healthy state, and understand the source and spread of the malware.

ProSight Active Security Monitoring and the Modern Threat Landscape
97% of data breaches could have been prevented by current security technology, but some successful attacks are inevitable. Sometimes the crooks win. ProSight Active Security Monitoring is designed around the premise that even with the best security technology, you may eventually suffer a breach. For this reason ProSight ASM not only provides malware blocking based on traditional static, signature-based prevention, but also dynamic detection of malware and exploits that have penetrated your network, fast isolation of infected devices, automatic removal of threats, near real-time immunization of all endpoints, single-click recovery (such as a rollback to a pre-ransomware state), and rich forensics to help you understand and eliminate your vulnerability.

By offering best-of-breed technology for before, during and after an attack, ProSight ASM delivers an end-to-end solution for addressing the realities of the modern security landscape and minimizing or eliminating financial, productivity and reputation loss in case of a breach.

Endpoints are the most vulnerable and most frequently targeted component of an information network. ProSight Active Security Monitoring services offer a single, integrated platform to manage the entire threat lifecycle including protection, detection, response and remediation. Threats addressed by ProSight ASM include:

• File-based malware such as ransomware, trojans, worms, backdoors and payload-based attacks
• File-less and memory-only malware with no disk-based indicators
• Document-based exploits embedded in Office and Adobe files, and macros
• Phishing and spear phishing emails (which account for over 90+ of successful data breaches)
• Browser-based attacks rooted in drive-by downloads, Flash, Java, Javascript, VBS, IFraME.htmL5, and plug-ins
• Live attacks based on scripts like PowerShell, Powersploit, WMI, and VBS
• Credential-based attacks including credential-scraping, Mimikatz, and tokens

Prevention: Before the Attack
With nation-state intelligence agencies joining the ranks of professional and amateur hackers, new malware is being developed far faster than the ability of anti-virus providers to write new signatures. The limitations of signature-matching endpoint protection has been recognized since around 2012 and its inadequacy is now an accepted tenet of IT security.

ProSight ASM utilizes low-overhead cloud intelligence and reputation services from multiple vendors to filter known malware. Deep file inspection plus dynamic blacklisting and whitelisting help make ProSight ASM a significant improvement over legacy anti-virus platforms, but prevention is only the first line of defense. Advanced exploits, file-less malware and script-based attacks can sneak past signature-matching barriers. For example, so-called "packers" compress code to disguise malware data so it can't be read by security researchers or malware blocking programs.

Detection and Response: During the Attack
The second phase of endpoint protection involves dealing with malware while it is executing. ProSight ASM uses next-generation endpoint protection (NGEP) technology to detect malicious behavior from any malware that gets through the automated blacklisting process. Even in the case of advanced file-less malware such as application and memory-based attacks, the malicious code must perform certain recognizable activities (e.g., creating an executable file without permission) if it is to compromise data. ProSight ASM's lightweight agent watches all activity in each protected endpoint and uses state-of-the-art behavioral threat analysis and full execution context to identify new attacks at inception. When an attack is discovered, ProSight ASM immediately disconnects the affected device from the network to contain the threat. Because the ProSight ASM agent is autonomous, devices stay protected even when they are not connected to the Internet.

Remediation: After the Attack
Once an attack is contained, ProSight ASM begins policy-based mitigation. When you use ProSight ASM in conjunction with Windows Volume Shadow Copy Service, modifications to data made by the malware attack can be rolled back automatically with a single click. ProSight ASM also logs whatever system-level files and settings were changed by the attack and what were remediated. Whenever ProSight ASM detects a new malicious binary, the threat is flagged and all protected agents on the network are immediately immunized against the attack. In addition, the ProSight ASM management console provides in-depth forensics, which include a clear visualization of the attack's progress through the network from inception to termination. This real-time audit trail of what happened during the attack exposes weaknesses that need to be addressed in your security strategy and answers questions like: How did the attack enter our network? Which employee or guest opened the malware file? What did the malware change on our network?

Download the ProSight Active Security Monitoring Datasheet
To download a PDF datasheet describing the key features of ProSight Active Security Monitoring, click:
Progent's ProSight Active Security Monitoring Services Datasheet. (PDF - 89 KB)

Other ProSight Managed Services Available from Progent
In addition to ProSight Active Security Monitoring, Progent's ProSight suite of network management services includes other budget-friendly, flat-rate managed services that address key aspects of your IT network including backup and disaster recovery, network infrastructure monitoring and management, and email content filtering. By partnering with some of the industry's most innovative technology vendors, Progent can offer small and mid-size organizations the benefits of the same advanced technology used by the world's largest enterprises. Managed services offered by Progent include:

• ProSight Enhanced Security Protection: Endpoint Security and Microsoft Exchange Filtering
  Progent's ProSight Enhanced Security Protection managed services offer economical multi-layer protection for physical servers and virtual machines, desktops, mobile devices, and Exchange Server. ProSight ESP uses adaptive security and advanced heuristics for round-the-clock monitoring and reacting to cyber assaults from all attack vectors. ProSight ESP provides two-way firewall protection, intrusion alerts, endpoint management, and web filtering through cutting-edge technologies packaged within a single agent managed from a single console. Progent's data protection and virtualization consultants can assist you to design and implement a ProSight ESP environment that addresses your company's unique requirements and that helps you demonstrate compliance with government and industry information protection regulations. Progent will assist you specify and implement policies that ProSight ESP will enforce, and Progent will monitor your network and respond to alerts that require urgent attention. Progent can also assist your company to set up and test a backup and disaster recovery solution like ProSight Data Protection Services so you can recover rapidly from a destructive cyber attack like ransomware. Learn more about Progent's ProSight Enhanced Security Protection unified physical and virtual endpoint security and Microsoft Exchange filtering.

• ProSight Data Protection Services (DPS): Managed Backup and Recovery Services
  Progent has partnered with advanced backup/restore technology providers to produce ProSight Data Protection Services, a portfolio of management offerings that provide backup-as-a-service. ProSight DPS services automate and monitor your data backup processes and enable non-disruptive backup and rapid restoration of important files/folders, applications, images, and VMs. ProSight DPS lets you recover from data loss caused by equipment breakdown, natural disasters, fire, malware like ransomware, user error, malicious employees, or software bugs. Managed backup services available in the ProSight Data Protection Services product line include ProSight Altaro VM Backup, ProSight 365 Total Backup (formerly Altaro 365 Backup), ProSight ECHO Backup using Barracuda dedicated hardware, and ProSight MSP360 Cloud and On-prem Backup. Your Progent expert can help you to identify which of these managed services are most appropriate for your network.

• ProSight Email Guard: Inbound and Outbound Spam Filtering and Data Leakage Protection
  ProSight Email Guard is Progent's spam filtering and email encryption service that uses the infrastructure of leading data security companies to deliver centralized management and comprehensive security for all your email traffic. The powerful architecture of Progent's Email Guard managed service integrates cloud-based filtering with an on-premises gateway appliance to offer complete protection against spam, viruses, Denial of Service (DoS) Attacks, Directory Harvest Attacks (DHAs), and other email-borne threats. The Cloud Protection Layer acts as a first line of defense and keeps most threats from reaching your network firewall. This reduces your exposure to external attacks and saves system bandwidth and storage space. Email Guard's onsite security gateway device adds a further level of analysis for incoming email. For outgoing email, the onsite security gateway provides anti-virus and anti-spam filtering, protection against data leaks, and email encryption. The onsite security gateway can also assist Exchange Server to monitor and safeguard internal email that stays inside your corporate firewall. For more details, visit ProSight Email Guard spam filtering and data leakage protection.

• ProSight WAN Watch: Network Infrastructure Remote Monitoring and Management
  Progent's ProSight WAN Watch is an infrastructure monitoring and management service that makes it easy and affordable for smaller organizations to diagram, track, reconfigure and debug their connectivity appliances such as routers, firewalls, and access points as well as servers, endpoints and other devices. Incorporating state-of-the-art RMM technology, WAN Watch ensures that network diagrams are always updated, copies and displays the configuration information of virtually all devices connected to your network, monitors performance, and sends alerts when potential issues are detected. By automating complex management and troubleshooting activities, WAN Watch can cut hours off ordinary tasks such as making network diagrams, reconfiguring your network, finding devices that require important updates, or isolating performance issues. Learn more about ProSight WAN Watch infrastructure monitoring and management services.

• ProSight LAN Watch: Server and Desktop Monitoring and Management
  ProSight LAN Watch is Progent's server and desktop monitoring managed service that uses advanced remote monitoring and management techniques to help keep your IT system running efficiently by checking the state of vital computers that power your business network. When ProSight LAN Watch detects an issue, an alarm is sent automatically to your specified IT management personnel and your assigned Progent consultant so all looming problems can be resolved before they have a chance to disrupt your network. Learn more details about ProSight LAN Watch server and desktop remote monitoring consulting.

• ProSight Virtual Hosting: Hosted Virtual Machines at Progent's World-class Data Center
  With Progent's ProSight Virtual Hosting service, a small business can have its key servers and applications hosted in a protected Tier III data center on a fast virtual machine host set up and managed by Progent's IT support experts. Under Progent's ProSight Virtual Hosting model, the client owns the data, the OS platforms, and the apps. Because the environment is virtualized, it can be moved immediately to a different hardware environment without requiring a time-consuming and difficult reinstallation process. With ProSight Virtual Hosting, your business is not tied one hosting service. Learn more about ProSight Virtual Hosting services.

• ProSight IT Asset Management: Network Documentation Management
  ProSight IT Asset Management service is an IT infrastructure documentation management service that makes it easy to create, maintain, find and safeguard information related to your network infrastructure, procedures, business apps, and services. You can instantly locate passwords or serial numbers and be warned about upcoming expirations of SSLs or domains. By updating and organizing your network documentation, you can save up to half of time thrown away searching for critical information about your network. ProSight IT Asset Management includes a centralized repository for storing and sharing all documents related to managing your network infrastructure like standard operating procedures (SOPs) and How-To's. ProSight IT Asset Management also supports advanced automation for gathering and associating IT data. Whether you're making enhancements, performing regular maintenance, or reacting to a crisis, ProSight IT Asset Management gets you the knowledge you need when you need it. Read more about Progent's ProSight IT Asset Management service.

• Active Defense Against Ransomware: AI-based Ransomware Detection and Cleanup
  Progent's Active Protection Against Ransomware is an endpoint protection managed service that utilizes next generation behavior analysis technology to defend endpoints and servers and VMs against new malware assaults such as ransomware and email phishing, which routinely evade traditional signature-matching AV tools. Progent ASM services protect on-premises and cloud-based resources and provides a single platform to manage the entire malware attack progression including filtering, identification, mitigation, remediation, and forensics. Top features include one-click rollback using Windows VSS and automatic network-wide immunization against new threats. Find out more about Progent's ransomware protection and cleanup services.

• Outsourced/Co-managed Service Center: Call Center Managed Services
  Progent's Call Center services allow your information technology staff to outsource Help Desk services to Progent or split responsibilities for support services seamlessly between your internal support group and Progent's extensive pool of certified IT support technicians, engineers and subject matter experts. Progent's Co-managed Help Desk Service offers a smooth supplement to your internal network support organization. End user access to the Service Desk, provision of support, issue escalation, trouble ticket generation and updates, performance measurement, and maintenance of the support database are cohesive regardless of whether issues are resolved by your internal IT support organization, by Progent, or by a combination. Find out more about Progent's outsourced/shared Help Desk services.

• Patch Management: Patch Management Services
  Progent's managed services for patch management offer businesses of any size a flexible and affordable solution for evaluating, testing, scheduling, implementing, and documenting updates to your ever-evolving IT network. Besides maximizing the security and reliability of your IT environment, Progent's patch management services permit your IT team to concentrate on line-of-business initiatives and activities that derive the highest business value from your network. Find out more about Progent's software/firmware update management support services.

• ProSight Duo Multi-Factor Authentication: Access Security, Endpoint Policy Enforcement, and Secure Single Sign-on (SSO)
  Progent's Duo authentication services utilize Cisco's Duo technology to defend against stolen passwords through the use of two-factor authentication. Duo supports single-tap identity confirmation with Apple iOS, Android, and other personal devices. With Duo 2FA, whenever you sign into a secured online account and enter your password you are requested to confirm your identity on a unit that only you possess and that uses a separate network channel. A broad selection of out-of-band devices can be used for this added means of authentication such as an iPhone or Android or watch, a hardware token, a landline phone, etc. You may register several verification devices. For more information about ProSight Duo identity authentication services, see Duo MFA two-factor authentication services for access security.

• ProSight Reporting: In-depth Reporting for Ticketing and Network Monitoring Platforms
  ProSight Reporting is an expanding line of real-time and in-depth management reporting utilities designed to integrate with the top ticketing and network monitoring platforms such as ConnectWise Manage, ConnectWise Automate, Customer Thermometer, Auvik, and SentinelOne. ProSight Reporting incorporates Microsoft Graph and utilizes color coding to highlight and contextualize key issues such as inconsistent support follow-up or machines with out-of-date AVs. By identifying ticketing or network health concerns concisely and in near-real time, ProSight Reporting improves network value, lowers management hassle, and saves money. For details, see ProSight Reporting for ticketing and network monitoring applications.

ProSight Network Audits
Progent's ProSight Network Audits offer a quick and low-cost alternative for small and medium-size businesses to get an unbiased evaluation of the overall health of their information system. Powered by some of the top remote monitoring and management tools in the industry, and overseen by Progent's world-class group of IT professionals, ProSight Network Audits show you how closely the deployment of your core network devices conform to leading practices. The Basic and Advanced versions of ProSight Network Audit services are offered at a low, one-time cost and deliver instant benefits such as a more manageable Active Directory (AD) environment. Both also include a year of state-of-the-art remote network monitoring and management (RMM). Advantages can include simpler management, improved compliance with information security requirements, more efficient utilization of IT assets, faster problem resolution, more reliable backup and recovery, and increased uptime. Read more about Progent's ProSight Network Audits IT infrastructure assessment.

Progent's ProSight Ransomware Preparedness Report Service
The ProSight Ransomware Preparedness Report service is an affordable service built around a brief discussion with a Progent backup/recovery expert. The fact-finding interview is intended to help assess your company's preparedness to defend against ransomware or recover rapidly after an attack by a ransomware strain like Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), DopplePaymer, LockBit or Nephilim. Progent will consult with you directly to collect information concerning your current AV defense and backup system, and Progent will then deliver a written Basic Security and Best Practices Report document describing how you can apply best practices to deploy a cost-effective security and backup system that minimizes your exposure to a ransomware attack and aligns with your business needs. For details, refer to Progent's ProSight Ransomware Preparedness Report Service.

The Progent Advantage
Progent's team of more than 100 consulting professionals includes certified experts in every aspect of information technology related to small and mid-size businesses. With this breadth of expertise, Progent can be your one-stop source for integrating a comprehensive security solution that delivers immediate business value. In addition to the endpoint protection provided by ProSight Active Security Monitoring, Progent offers other managed services and specially-priced service packages designed to help small and mid-size businesses to deploy, validate, and manage networks that feature enterprise-class information assurance and low total cost of ownership (TCO).

Besides the ProSight suite of ongoing network management services, Progent offers specially priced one-time service bundles to help organizations of any size to achieve and demonstrate compliance with regulatory and industry security standards. These value-priced services include security vulnerability assessment and stealth penetration testing. Progent also offers expert disaster recovery planning consulting and business continuity planning consulting to help ensure you can return to operations quickly in case of a catastrophic failure due to a natural disaster, fire, cyber attack, human error, equipment breakdown, or any other foreseeable disruptive event.

Progent has expertise in all the endpoints, servers and virtual machines that can be protected by ProSight Active Security Monitoring and offers services that include Windows 11 planning and migration consulting, Windows 10 integration, Linux support, Mac OS X and macOS consulting, iPhone and iPad configuration, Android integration, Windows Server 2022 integration expertise, Windows Server 2019 migration consulting, Hyper-V virtualization support, and VMware vSphere consulting. For single-click or manual rollback capability, Progent's Windows Server consultants can help you set up Windows Volume Shadow Copy Service (VSS). Progent can also provide online and onsite access to certified Cisco CCIE consultants to help you plan, protect or troubleshoot your network infrastructure. If your network incorporates cloud resources, Progent offers the guidance of Microsoft Azure consultants, Amazon AWS experts, and Google Cloud integration consultants.

Contact Progent about ProSight Active Security Monitoring Services
To find out more about how Progent can help you set up an affordable, fully managed endpoint security solution with ProSight Active Security Monitoring, call 1-800-993-9400 or visit Contact Progent.

Ransomware 24x7 Hot Line: Call 800-462-8800
Progent's Ransomware 24x7 Hot Line is designed to help you to take the time-critical first step in responding to a ransomware attack by putting out the fire. Progent's online ransomware engineer can assist you to locate and quarantine breached servers and endpoints and guard clean resources from being penetrated. If your network has been penetrated by any version of ransomware, act fast. Get help quickly by calling Progent's Ransomware Hot Line at 800-462-8800. For details, see Progent's Ransomware 24x7 Hot Line.