2022 彙整 - Page 22 of 121

Introducing the runZero Infinity Partner Program

We don’t know what’s on our network anymore. Networks are more complex than ever. Unmanaged and agentless devices are constantly spinning up and down, and there’s a never ending surge of smart and IoT devices.

The tools used for asset discovery today haven’t changed in the past 20 years, but the devices sure have. This leaves unknowns across networks. Unknowns = big risk.

Strong security posture starts with an authoritative source of truth for the network. Frameworks, like CIS, NIST, and the new CISA directive, all start with asset inventory for good reason: if we don’t know what’s on our network, we can’t protect, secure, and manage it. runZero was designed to solve this critical, universal problem.

Better together with our partners

runZero’s goal is to bring cyber asset management to networks around the world. Our partner community is one of the most meaningful and significant ways to achieve this goal and meet the market demands for asset inventory.

Over the summer, I joined runZero as the Director of Channel to build and scale our partner team and ecosystem with three clear goals:

Deliver an exceptional experience for partners.
Accelerate sales and revenue growth alongside our partners.
Grow our partner attach rate to 80% of revenues.

Over the past four months, our partner team has grown 4x, and we’ve got a lot more growth planned (we’re hiring). Our team’s top priority has been building a partner-first framework to revamp how we work with our partners.

Introducing the runZero Infinity Partner Program

When partners ask about runZero’s partner culture, I can truly and emphatically say we have a “partner first” mindset. Today, I’m excited to introduce our runZero Infinity Partner Program!

With its launch, our partners now have the resources, enablement, content, training, and support to deliver a powerful cyber asset management solution to our joint customers globally. The Infinity Partner Program puts the partner experience front and center by matching how our partners do business and serve their end customers. The program builds on our already strong channel presence and focuses on helping partners maximize their investments with us.

Our team will be here to support our partners on every step of their journey with us. From that initial first meeting all the way to creating joint go to markets, we’re in this together.

You can find all of this and more in our brand new Infinity Partner Portal.

What’s coming today

A best-in-class portal experience empowering partners through training, certification programs, and exclusive partner-only collateral
Collaborative go-to-market support, including industry events, joint marketing efforts, and co-sell motions
Extensive partner enablement and learning content
Rewards-based incentive framework and discount structure

What’s coming in the future

Advanced training and certifications
Exciting partner SPIFs and new incentives
Additional content and joint go to market opportunities
runZero partner team growth to best support our partners
Alliance and technical integration opportunities
MSP specific content
And more!

Stay tuned as we move to infinity and beyond!

Learn more about the runZero Infinity Partner Program.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About runZero
runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.

2022 runZero

IoT Device Management & The Critical Role of NAC

Introduction

IoT (Internet of Things) is a revolutionary technology with tremendously promising potential impact. It has grown exponentially, from industry to home, and the number of IoT devices will likely keep rising. However, this new technology also raises security concerns. As these devices become prevalent in the public sector and the home, IT specialists must be able to use them appropriately

A recent forecast shows that 27 billion internet-connected devices will be in place by 2025. As IoT technology becomes more widespread, it is beginning to influence how individuals interact worldwide. To ensure safety for IoT devices, organizations must ensure that these devices are correctly configured and monitored.

Network Access Control (NAC) can address these IoT management and security issues by providing foundational protection against the rise of IoT threats.

IoT Device Management, Onboarding & NAC

IoT device management and onboarding involves securely linking IoT devices to internal networks. Organizations can then monitor and control IoT devices while securing their networks by enrolling them.

NAC is a foundational security tool that helps with this by significantly reducing unauthorized access to critical business assets while also remedying flaws in the device enrollment process. NAC is central in securing IT infrastructure against rogue IoT devices and other malicious threats.

How NAC Facilitates IoT Device Management & Onboarding

Below are some roles in which implementing NAC can help IoT devices management and onboarding:

Authentication

IoT devices need to be authenticated before they can connect to a network to mitigate the threats such as man-in-the-middle and replay attacks. NAC helps mitigate this risk by blocking access between the user and the network until they are fully authenticated.

Network Configuration

NAC can also adjust the network configuration of IoT devices during onboarding. For example, if it is required for a device to connect to a specific subnet or VLAN, the NAC can automatically configure it to do so.

Monitoring

The security posture of IoT devices can significantly affect both the security of devices and their respective networks. It is critical to monitor the health of current devices and ensure that they are properly secured. NAC performs real-time monitoring and establishes monitoring policies.

Event & Log Management

NAC is responsible for gathering log and anomaly data from IoT devices. It can log various events, such as device-related information, user activity, firewall and gateway logs, reports on application and security configuration changes, etc. Users can use this data to troubleshoot problems in case of any issues arising from connected devices

Data Management

The collected data NAC gathers form connected IoT endpoints helps to improve the security configurations of specific devices. Moreover, NAC controls how information is exchanged between connected devices and an organization’s cloud services (i.e., IoT applications).

Security Configuration

NAC can be used to perform deep security configurations of IoT devices, such as determining if IoT device users are permitted to connect to the network.

If a user is authorized, NAC can also configure IoT devices’ security settings and configurations accordingly. It can be further configured to check specific attributes, such as whether an IoT device has antivirus software installed or whether it uses particular firewall rules.

Compliance

Upon completion of the onboarding process, the IoT device will be validated for compliance with the organization’s security policies. NAC can help oversee corporate security compliance by requiring updates and software patches, ensuring business services adhere to regulatory standards, and configurations adhere to the licensing policy.

Implementing a NAC-Based IoT Device Management Solution

In executing a NAC-based IoT device onboarding solution, NAC solutions must be available for an organization’s devices and cloud services. Users must also have access to the security control plane to configure policies for connected devices and make decisions based on them. The following steps help to implement the NAC-based IoT device onboarding solution:

Identify IoT Devices that Require Onboarding

NAC solutions can help organizations identify what IoT devices are connected to the network, how and when they were connected, and how their configuration changes over time. This information can be used to develop policies that optimize the secure operation of IoT devices.

Enable IoT Devices for Onboarding

Once the devices have been identified, it is crucial to ensure that they are onboarded securely. NAC solutions can help support this process by enforcing security policies for IoT devices and using identification services and rules to ensure that there are no exceptions.

Enable Cloud Services for Onboarding

The network’s security dramatically relies on the cloud applications’ security. This means that it is vital for organizations to ensure that the cloud applications are appropriately configured for security and adhere to policies.

Apply IoT Device Management & Control Policies

Once the onboarding process has been completed and each device performs as expected, it is vital to ensure that the appropriate adjustments are made. NAC solutions can provide a way to quickly deploy security policies for IoT devices or schedule recurring tests to ensure they work as expected.

Monitor IoT Device Health

The network’s security depends on the health of all the connected devices – and IoT is no exception. To ensure that the security of each device is maintained, it is essential to ensure that they are operating as expected. NAC solutions can monitor IoT device performance over time and provide specific alerts when a problem is identified in a device.

Final Thoughts on NAC & IoT Device Management

NAC is a vital component of IoT device onboarding and is essential for an organization’s devices and cloud services. NAC can help ensure that devices are securely configured and performing as expected, while also ensuring that cloud applications are installed and configured securely.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。

2022 Portnox

Home may be more comfortable, but is it more secure?

Two and a half years into a new normal, we have had to get used to working from the office one day and from home the next. A hybrid work model has become standard for a lot of us. And many new work opportunities list hybrid work as one of the perks of the company. We have gotten used to the comfort of working from home and deciding when to come to the office, but when it comes to digital security, this comes at a price. This is especially true if you use your personal devices for work purposes. Many employers have adapted this so-called bring-your-own-device (BYOD) protocol.

Research has shown that in 2021, 61% of malware directed at organizations targeted remote employees via cloud apps. Attackers are always looking for new ways to exploit, hurt or damage. Hybrid work has given them a new opportunity — one we cannot take lightly.

We take it for granted that our employer takes care of the company’s cybersecurity and protects its network. But what happens when some of this burden is put on the employee?

Apart from your company’s digital security protocols, you should also think about your own security and protection.

ESET’s new Windows offering has several improvements to make your home office security run smoothly. This offering includes all levels of security: essential security (ESET NOD32 Antivirus), advanced security (ESET Internet Security) and premium security (ESET Smart Security Premium). Whichever level you choose, it is a great start to protect your devices.

One of the features is Network Attack Protection, which is an extension of firewall technology and improves detection of known vulnerabilities at the network level. It also offers another layer of protection against malware, network-conducted attacks and exploitation of vulnerabilities for which a patch has not yet been released.

A critical layer of protection for any home is a router protection solution. ESET Network Inspector is a feature included in the advanced security (ESET Internet Security) and premium security (ESET Smart Security Premium) offerings. This diagnostics tool provides information about the security of your router. It also displays a list of devices connected to the user’s network, highlighting any surprise visitors.

Another useful feature for your home office is Exploit Blocker. It is designed to fortify commonly exploited application types, such as web browsers, PDF readers and Microsoft Office components. When Exploit Blocker identifies a suspicious process, it can stop that process immediately and then record data about the threat, which is then sent to the ESET LiveGrid® cloud system. This data is then analyzed by the ESET Research Lab to better protect all users from unknown threats and zero-day attacks.

This new offering also leverages a new hardware-based security that boosts ransomware protection by enabling Intel’s hardware-based ransomware detection technology found on Intel® Core™ processors. This will add an additional layer of protection to your device, without slowing it down.

All levels of this new offering also include Anti-Phishing protection. Phishing is a kind of attack that tries to gain access to sensitive data, such as bank details, usernames, personal identification numbers, passwords and more. This feature blocks web pages known to distribute phishing content. ESET protects your privacy and assets.

What makes this offering that much more useful is the option to group all of your protected devices under one roof. Connect them to ESET HOME to view and manage all of their activities.

ESET’s new consumer offering is a well-rounded digital security solution. It protects your personal devices so that you can use them to work or play without fear.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

2022 ESET

What Solution Is Best For Your Offboarded Data?

Data security is one of the most prominent issues of the digital age. Constantly evolving and changing, data compliance can be a difficult area to navigate and can be a huge project for any IT department. When a user is offboarded, finding a solution to help you deliver the complex needs surrounding data can be a tricky challenge and if data compliance isn’t withheld to the letter, you could be left with some serious headaches.

In 2021, CloudM created the holy grail of solutions for your offboarded user data. Archive, an industry-first feature, was designed to help businesses by managing compliance, retaining/restoring data as needed, and purging the data when it’s longer needed.

As the footprint for data becomes more and more embedded within our civilization, Archive and other tools like it will become indispensable, helping you to navigate those difficult and sticky data headaches, and keeping you compliant.

So, what’s the best solution for you?

Well, there are three core solutions that will help you stay compliant and efficient, all whilst working to your needs and requirements as a business.

What can we learn from this?

Every business needs something different, and for that, there must be a relatively flexible solution. This is why Archive can work as a solution on its own or as a hybrid solution.

Get in touch with our team of experts for your free demo today.

Get Started

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About CloudM
CloudM is an award-winning SaaS company whose humble beginnings in Manchester have grown into a global business in just a few short years.

Our team of tech-driven innovators have designed a SaaS data management platform for you to get the most from your digital workspace. Whether it’s Microsoft 365, Google Workspace or other SaaS applications, CloudM drives your business through a simple, easy-to-use interface, helping you to work smarter, not harder.

By automating time-consuming tasks like IT admin, onboarding & offboarding, archiving and migrations, the CloudM platform takes care of the day-to-day, allowing you to focus on the big picture.

With over 35,000 customers including the likes of Spotify, Netflix and Uber, our all-in-one platform is putting office life on auto-pilot, saving you time, stress and money.

2022 CloudM

How to Avoid Account Takeover Risks from Push Bombing and MFA Fatigue Attacks

Organizations turn on multi-factor authentication (MFA) to secure access to corporate resources and increase their security posture.

IT admins like using push notifications MFA for several reasons. Since most users have smartphones in their pockets at all times, push notifications offer minimal user friction. They are also ubiquitous (admins can enable them across different kinds of resources and endpoints unlike other methods) and offer security against “man in the middle” attacks.

Recently, this trusted security measure has been facing a new kind of attack known as push bombing or MFA fatigue. Keep reading to learn more about how to reduce your risk.

What Is Push Bombing and MFA Fatigue?

When an organization uses push MFA, the user is required to approve the login or access request sent to their personal device in the form of a push notification. This is just one way (of many) to verify the user’s identity, but preferred given its UX benefits.

Push bombing is a method where an attacker uses a script or a bot to trigger multiple login attempts with stolen or leaked credentials and trigger a SPAM of multiple push notifications to the user’s mobile device.

Here’s how it works:

An attacker repeatedly sends a user endless push notification streams with the intent to exacerbate them into accidentally approving the prompt.
Understandably, the user feels a sense of fatigue, and it’s easy to make mistakes out of frustration. They accept the prompt.
Unfortunately, the trick works extremely well for account take over and breaches. The attacker now has access to the account in question.

Alternatively, an attacker may also contact the user impersonating as an IT admin and convince them to approve the login attempt.

How JumpCloud Protect Helps Admins Combat Attacks

Stronger Password Policy

Push attempts are triggered after an attacker gains access to a user’s password. The weaker the password the more likely an attacker is to obtain it through brute force and social engineering techniques.

IT admins can use JumpCloud’s password settings to adopt a stronger password policy that meets the following requirements:

Greater than or equal to12 characters in length, including alphanumeric
Upper and lower case combinations
Changes password every 90 days

Admins should also use password aging to reduce risks due to re-use of older, leaked, or stolen credentials that a hacker may have obtained. Here’s what the Password Settings look like in the JumpCloud management portal:

Admins can also use JumpCloud’s password manager to manage their user’s passwords, which reduces the friction associated with using lengthier passwords with increased security posture. JumpCloud Password Manager eliminates the need to remember a master password thereby reducing the risks due to password leaks or breaches.

Account Lock-Out

Admins can use JumpCloud’s account lock-out settings to set a limit for password and Push MFA retries. A user’s account will be locked if the user denies a login request sent in Push notification for a specified number of consecutive attempts as determined by the settings. Admins can auto unlock the account after a certain duration to reduce user friction.

Mobile Biometric

Admins can activate mobile biometric on Push MFA, so that a user is required to use their fingerprint or face recognition as an additional factor to approve a login request. Here’s a look at what both the admin and user sees during this process:

screenshot of JumpCloud protect mobile push

Conditional Access

Admins can leverage JumpCloud conditional access policies for user portal and SSO application login attempts to restrict access from trusted devices or allow access only from the locations where an employee lives or places of travel. Simply select the Conditional Access option from the platform’s left-side navigation to open Conditional Access settings:

App and Location Information on Push Notifications

Admins can educate their users to check the application name for which the access request is made or the location from where the request was made before approving the request.

While application name or a granular location information may not always be available, when it is present it will help flag potentially fraudulent access requests.

Avoid Account Takeovers with JumpCloud

As reported by Microsoft, requiring MFA has been shown to reduce account takeover attacks by 99%. While MFA does offer resistance to attacks, hackers have, unfortunately, found a way to circumvent them with push bombing and MFA fatigue.

So, it’s important for organizations to employ additional precautions such as adding phishing-resistant email tools and filters, educating users on stronger password practices for their personal and work accounts, and implementing stronger security practices to avoid security breaches.

JumpCloud continuously adds new features that increase the security posture of the platform to give IT admins and organizations peace of mind. IT admins can also better protect their organizations by adopting JumpCloud recommendations, starting with enforcing stronger password policies.

Ready to experience the ease of JumpCloud for your IT needs?

Click here to start your free account today.

Security

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About JumpCloud
At JumpCloud, our mission is to build a world-class cloud directory. Not just the evolution of Active Directory to the cloud, but a reinvention of how modern IT teams get work done. The JumpCloud Directory Platform is a directory for your users, their IT resources, your fleet of devices, and the secure connections between them with full control, security, and visibility.

JumpCloud 2022