Instantly block any attack or compromise at the perimeter, application or within the network, provide forensic snapshot for remediation, and lock out of compromised accounts, stopping further propagation.
Proficio ProSOC-Active Defense solution automatically blocks high-risk IP addresses from penetrating customer networks, based on suspicious behavior. Active Defense is a unique solution focused on providing automated security to firewalls and next-generation firewalls.
It automatically blocks and protects the network, provides ample time for the security team to properly investigate and remediate issues before further damage occurs. Active Defense runs in near real-time on a 24×7 basis.
Rapid, automatic blocking and containment, enables you to bypass the manual firewall update process. Limits human error and allows immediate action.
Triggers an Active Defense action based on certain scenarios. Automatically updates the firewall rule on behalf of the customer. Examples of these scenarios include: Inbound network sweep from Blacklist IPs, massive SSH access from Blacklist IPs, inbound scan to host from Blacklist IPs, and brute force login attempt from Blacklist IPs
Automated notification to customers allows Proficio to make a change to their firewall rules, to block the high-risk IP that was detected. Customized daily, weekly reports available based on your preferences and accessible from our ProView portal.
Proficio’s team of certified security analysts perform a forensic investigation which involves a structured, documented process to provide evidentiary information about a computer device, answering the how, who, when and here it was compromised.
Learn more