Fortress Endpoint Services 2019

Sales enablement deck for Fortress Endpoint Services. All copy, infographics, tables and charts created by Colleen Green.

Transcript

1. FORTRESS ENDPOINT SERVICES
2. Over the years, MCPc has developed a comprehensive, streamlined, approach to secure endpoint lifecycle management We call it Secure Technology Logistics
3. Purpose-Built Facilities STLC SOC Highly Secure We have dedicated purpose-built facilities to support our service offerings – we have invested millions of dollars in our facilities – or better put, for our customers Cyber Center
4. SECURITY OPERATIONS CENTER • 24/7/365 Monitoring • Managed Patching • Managed Antivirus • Managed Backup • Disaster Recovery • Service Desk • Talent Solutions
5. MCPc CYBER EDUCATION CENTER • Hands-on, real-world cyber training for students enrolled in the Mercyhurst University Cyber Program • 80,000 sq ft of space • 2 computer labs • A cyber lab • A Security Operations Center
6. BUSINESS VALUE Removing administrative burden from your internal IT increases their productivity and allows them to focus on your business needs Increased Productivity
7. BUSINESS VALUE Co-management allows your IT to control their environment while gaining access to powerful software and our experienced team Co-management
8. BUSINESS VALUE Total Cost of Ownership Mitigate software and technician costs by utilizing our team and purpose built SOC
9. BUSINESS VALUE Allows you to have support coverage for each device while keeping you from over spending on shelfware Pay as you Grow
10. BUSINESS VALUE Single Pane Visibility Gain instant access to the data of your assets, inventory and the components within them
11. FORTRESS ENDPOINT SERVICES
12. VANTAGE POINT Managed SIEM FORTRESS Managed Services A portfolio of managed solutions dedicated to enhancing productivity & protecting your environment. OVERWATCH Remote Monitoring & Management GUARDIAN Managed Patching SENTINEL Managed Antivirus RECON Risk Intelligence VAULT Managed Backup LOCKDOWN Endpoint Hardening
13. FORTRESS Managed Services Fortress helps your business • Removing administrative burden from your internal IT helps up their productivity allowing them to focus on your business needs • Co-management can allow your IT department to keep control of their environment while gaining access to powerful software and our experienced team of engineers • Reduce the total cost of ownership of your internal IT department by mitigating software costs, utilizing our team and purpose built SOC instead of hiring more network technicians, investing in more hardware and constantly fighting maintenance and security issues • Pay as you grow allows you to make you have support coverage for each device and keeps you from having to overbuy for shelfware
14. Endpoint Protection 24x7x365, On the road or in the office
15. Reporting Methods Dashboards Detailed dashboards to drilldown into fleetwide information
16. OVERWATCH Remote Monitoring & Management • Reduce downtime • Increase your time-to-value • Single pane of glass • Historical performance data and real-time monitoring Provides real-time monitoring for all your devices so you can maintain order in even the most chaotic IT environments. SYSTEM MANAGEMENT STANDARD PREMIUM Remote Management   Secure, Audited Access   No VPN Required   Unattended Remote Console  Remote Command Prompt  Remote File Transfer  Remote Service/Process Management  Remote Scripting  Scheduled Tasks  ASSET REPORTING STANDARD PREMIUM Hardware Configuration   Warranty Status   Installed Software   DEVICE MONITORING STANDARD PREMIUM Minimum Polling Interval   CPU Utilization   Memory Utilization   Disk Capacity  Disk I/O  Disk Health  Patch Status   Event & Security Logs  Windows Services  Windows Processes  Custom Monitoring 
17. OVERWATCH Remote Monitoring & Management Like a Flight Data Recorder for your Endpoints
18. OVERWATCH Remote Monitoring & Management One Click Remote Control Identify risks at a glance
19. OVERWATCH Remote Monitoring & Management • Hardware • Firmware • Applications • Drivers • Patches Comprehensive Inventory
20. GUARDIAN Managed Patching • Protection against attacks • Spend less time managing patches • Increase security and compliance • Reduce time to deploy and install patches • Conserve bandwidth consumption Provides a cost-effective, managed approach to protect and update your endpoints. PATCH MANAGEMENT STANDARD PREMIUM Deploy Critical and Security Patches   On-Demand Patch Removal   On-Demand Deployment for New Vulnerabilities   Quarterly Vulnerability Scan  MICROSOFT PATCHING STANDARD PREMIUM Windows OS Patches   Microsoft Office Patches   Microsoft Runtime Patches   Microsoft Drivers   SERVICE MANAGEMENT STANDARD PREMIUM Patch Status Monitoring   Centralized Reporting Portal   24x7x365 Support   THIRD PARTY PATCHING STANDARD PREMIUM Adobe Flash  Adobe Acrobat  Oracle Java  Google Chrome  Mozilla Firefox  Apple iTunes 
21. GUARDIAN Managed Patching Real-time monitoring brings patch status to the forefront, enabling focus and prioritization on vulnerable systems.
22. GUARDIAN Managed Patching Software vulnerability scans compare current system status against NIST National Vulnerability Database. Out of the box support for common third-party applications
23. GUARDIAN Managed Patching
24. GUARDIAN Managed Patching • Patches can be applied to different groups by policy. • Ability to Approve, Decline, or Remove patches quickly • Can use scheduled maintenance windows or immediate push
25. GUARDIAN Managed Patching 1. The Agent communicates with Windows Updates and requests a list of available updates. 2. The Agent transmits this information to the Guardian server. 3. The Guardian administrator configures approvals for the list of updates. 4. The Agent communicates with the Probe and requests the approved updates. 5. The Probe downloads the updates. 6. The Agents download the updates from the Probe. 7. The Agent applies the schedule for installing updates. Patching Architecture
26. GUARDIAN Managed Patching
27. GUARDIAN Managed Patching APPROVAL TYPE DESCRIPTION Approved for Install The patch will be installed. It will not appear as a missing patch. Patches such as drivers may require user input to complete the installation. Approved for Removal The patch will be removed if the removal option is available. To determine if the patch is removable, on the Patch Management Home page, click By Patch and click on the patch name and locate the line called Removable. This status implies a best effort for Guardian to remove the patch. Removing a third-party patch will result in the entire removal of the third-party application. If you remove the patch, it will be flagged as missing. Declined Guardian does not install the patch and does not flag it as missing. The patch is still available for installation through MCPc but will not be visible to the device when checking against Windows Update. Not Approved Guardian does not install the patch on a device and flags it as missing. It will be visible to the device from Windows Update. You may want to save it for a future time. This means that the update remains in the default list of available updates and will report client compliance but will not be installed on any devices. No Approval Guardian takes no action with the patch, does not install it on a device, and flags it as missing. No value is stored in the Guardian database for this type of approval, and the agent receives no value for this approval.
28. GUARDIAN Managed Patching
29. SENTINEL Managed Antivirus • Reduce cost • At work or on the road • Managed and Monitored 24x7x365 • Enterprise class protection • Rule-based system behavior and application blocking • Monthly reporting • Real-Time Dashboard Delivers powerful protection for Windows® devices, wherever they happen to be. MALWARE MANAGEMENT STANDARD PREMIUM Signature Based Detection   Application Behavioral Analysis   Anti-Phishing Protection   NETWORK SCANNING STANDARD PREMIUM Scan Incoming Email at Client  Scan HTTP, SSL Traffic  Network Firewall Settings  APPLICATION COMPLIANCE STANDARD PREMIUM Application Blocking  Application Auto-removal  WEB CONTENT FILTER STANDARD PREMIUM Category Driven Access  Filter Web Off Corporate Network  Secure Search  SERVICE MANAGEMENT STANDARD PREMIUM AV Status Monitoring / Remediation   Centralized Reporting Portal   Initial Threat Remediation (File Removal / Quick Scan / Notification / Escalation)   24x7x365 Support 
30. SENTINEL Managed Antivirus 24x7x365 Response
31. SENTINEL Managed Antivirus Each enrolled device reports AV status real time, wherever the device may be.
32. SENTINEL Managed Antivirus Aggregation of events for a holistic view of the environment. Threats are monitored and responded to by our 24x7x365 SOC, in cooperation with your team.
33. VAULT Managed Backup • Protect valuable data • Ensure rapid recovery • Managed centrally • Flexible coverage • Centralized reporting • Efficient network usage • Reduced backup time and storage usage Provides a simple, managed solution to backup important data quickly, reliably, and efficiently without adding unnecessary burden to internal IT departments. FILE LEVEL BACKUP STANDARD PREMIUM Microsoft Office Files (.DOC/.DOCX/.PPS/.PPT/.PPTX/.XLS/.XLSX)   Microsoft Works Files (.WPS/.XLR)   iCloud for Mac OS X (.PAGES/.KEY)   Word Perfect (.WPD)   Adobe Acrobat (.PDF)   Standard Files (.RTF/.TXT/.CSV/.ODT)   Any Other File Type  SYSTEM LEVEL BACKUP STANDARD PREMIUM Administrative Restore   End User Self-Service   Full System Image  Bare Metal Restore  System State Backup & Restore  Virtual Machine Restore  STORAGE & RETENTION STANDARD PREMIUM Number of Backups per Day 2 No Limit Number of Days Retained 28 No Limit Individual File Size Limitation 50MB 200GB Storage Included per Device • Storage is aggregated from all devices • Additional storage available in 1 TB increments Unlimited 100GB SERVICE MANAGEMENT STANDARD PREMIUM Job Status Monitoring / Remediation   Centralized Reporting Portal   12x5 Weekday Support  24x7x365 Support 
34. VAULT Managed Backup Centralized management for distributed endpoint backup.
35. Protecting the Endpoint Endpoint Security • Detect known and unknown threats with scenario analytics and AI/ML • Dismiss false positives through corroboration and prioritization • Accelerate hunting and investigation with user contextualization, data visualizations, and direct access to underlying data • Streamline your security operations with security automation and orchestration • Minimize total cost of ownership with a unified and field-proven platform
36. Introducing Vantage Point Managed SIEM • Uncover threats faster. Work smarter. • See shifts in behavior as they happen. • Spend your precious time on important work. • Prove reduced risk to your organization. • Build for today. Scale for tomorrow
37. Vantage Point Managed SIEM STANDARD PREMIUM Next-gen SIEM and Log Management   Scalable structured and unstructured search   Large data set analysis via visual analytics, pivot, and drill down   Integrated Case Management with Dashboarding   Integrated ticket creation system   Workflow-enabled automatic response  Prescriptive Response with CISO guidance  Up-to-Date Compliance Packages/Reports (PCI, SOX, HIPAA, GDPR, etc.)  Independent Endpoint Forensics (UEBA)   *File Integrity and Windows Registry Monitoring (FIM, RIM)   *Data Loss Detection (DLD)   Cloud Services Integration (IE: O365, Azure, EC3)   Epic Hyperspace Integration (Geolocation, UEBA, Advanced Auditing)  *Advanced Desktop pricing includes FIM, RIM, and DLD for both Standard and Enterprise packages. INTELLIGENT THREAT DETECTION & RESPONSE Rapidly detect, respond to and neutralize cyber threats in your network environment. Understanding what is talking to the endpoint.
38. Why Managed SIEM? 5 Major Obstacles to Threat Handling Obstacle 1: Alarm Fatigue Obstacle 2: Swivel-Chair Analysis Obstacle 3: Forensic Data Silos Obstacle 4: Fragmented Workflow Obstacle 5: Lack of Automation
39. Features What it provides • One Pane of Glass monitoring solution • Automated Prescriptive Incident Response • 24x7x365 MSSP monitored with CISO guidance • Align HIPAA compliance requirements with day to day operations • Quickly reclaim your data and return your business back to normal operations • Rapidly detect and respond to malware, limiting the ability for a widespread outbreak • Correlate and normalize data between on premise and cloud data sources • Delivers consistent, documented and repeatable security services so you can focus on other business priorities
40. Shortening the Event Lifecycle Reducing the overall footprint
41. A True Security Ecosystem Tying everything into a single source of truth Businesses have been buying these solutions for years… …SIEM makes these pieces work as a single security ecosystem. Security Firewall IPS Malware WAF Endpoint Network Routers Switches Wireless Directory Services Active Directory Users Groups Data Management Data Loss Data in Motion Data at Rest Email Spam Malware Phishing Physical Alarms Surveillance Access Control SIEM
42. Compliance Tailor made reporting for regulatory compliance Consolidated Compliance Framework is built on the “grandfather” frameworks upon which most regulations are based: • Framework, 800-53 and 800-171 • ISOCIS Critical Security Controls (CSC)NIST • Cybersecurity 27001 The CCF maps standard rules, investigations and reports to common control needs. These controls map well across most compliance frameworks and can thus be shared. This reduces the effort spent on setup and correlating multiple, identical alarms across frameworks.
43. Security Operations Centers Available when you need us • Purpose-built Security Operations Centers in Cleveland, OH and Erie, PA • Skilled, certified engineers continually monitor your systems through our Overwatch monitoring solution • Available 24x7x365 to monitor, respond to and remediate security events identified by our Fortress Endpoint services