A recent article on MyBroadband headlined “South African firms hit by ransomware attack — and hackers want R1 billion” it was explained that the popular IT management tool of Kaseya was attached by ransomware demanding close to R1 billion. “Due to the attack being launched against the very software that Kaseya uses to manage the security and information of its customers, companies are unable to recover from the attack.” This is devastating news and if you cannot recover from this how do you manage going forward?
The attackers took down the main tools that their customers need to recover from a threat, encrypting the data to ensure that there is no way for the Kaseya team to recover from this. But could this be avoided? Would simple firewall rules help to persuade the attackers to look elsewhere?
The reality is simple, if attackers want to be malicious, they will always find a way to do so. You just need to make it hard enough for the attackers to get to the data and the systems they want.
ITried’s partner, Fusion Broadband South Africa, has engineered and added active threat intelligence to its SD-WAN deployments. This safeguards your network against hackers. It is proactively updated hourly and is not used in the same way that static predetermined firewall rules are.
The well-known X-Force Threat Management services from IBM incorporated into the Fusion SDWan solution manage the full threat lifecycle, from detection to prevention. X-Force Threat Management is a comprehensive threat management program that integrates the capabilities of penetration testing, managed security services, incident response, artificial intelligence, and a digital protection platform.
As added security, they have incorporated content management solutions that prevent inappropriate content from reaching the network edge and restricting access to advertisements or pornographic websites, as these are well-known malware distribution points.
For this reason, ITried uses this SDWan solution for all of their builds and recommends this to all of their clients.
Having a solution like this in place could have helped this company from getting their data encrypted and block by this command and control tool. Most other SDWan or firewall providers say they have the tools for threat protection but never enables it on the devices, or charging customers for the solution but never implementing it. Making this so-called firewall still vulnerable and useless against these sophisticated attacks.
With a starting price from as little as R599 per month you too can benefit from this and many more security features that the SDWan has to offer. Contact us today or visit itried.co.za/sdwan for more info.