Some examples include the network firewall having security services that are expired. We actually find this quite frequently. One of the functions of a firewall is to provide a secure point of entry into the network. When those security services expire, those security features no longer function, and this leaves your network open to threats. By maintaining your firewall in our cloud system, we are able to track the security services and make sure they are up to date as well as plan for upgrade or replacement of the hardware when it’s the end of its life. If you have a VoIP phone system, there are areas in the firewall that need to be configured specifically for that system to maintain high call quality. We typically find that these areas are either not configured or misconfigured, leading to issues with your phone system. By configuring these correctly and maintaining the equipment, you experience a much higher level of function and service.

The other equipment in your network needs similar maintenance in order to function as it is intended. When we look at the configuration of the servers we take over, we find a lot of them are misconfigured or under-resourced. We see this a lot with servers that are running virtual hosts but also find it on locally installed servers. By setting these up correctly and maintaining the patching, antivirus, etc. we are able to improve the overall functionality of your software and your network.

Maintenance of your network equipment also includes hardware like switches, wireless access points, and workstations. There are firmware updates and Windows updates that need to be maintained as well as watching for reboot cycles, antivirus, etc. When you are under our Managed Services umbrella, all of this is included. We schedule updates outside of business hours and handle all of it so you don’t have to think about it. When your entire network is configured correctly and maintained correctly, the number of issues you see is greatly diminished, which goes into improved uptime.

While maintaining your equipment is incredibly important to a quality network, it is also important to plan for the future, which we help with as well. We track your hardware warranties and original purchase dates so we can help you plan ahead for upgrades and replacements. All hardware will have an approximate lifecycle and by planning for replacing or upgrading equipment, we are able to keep you ahead of the technical issues that come from using equipment that is past its end of life.

Some examples include the network firewall having security services that are expired. We actually find this quite frequently. One of the functions of a firewall is to provide a secure point of entry into the network. When those security services expire, those security features no longer function, and this leaves your network open to threats. By maintaining your firewall in our cloud system, we are able to track the security services and make sure they are up to date as well as plan for upgrade or replacement of the hardware when it’s the end of its life. If you have a VoIP phone system, there are areas in the firewall that need to be configured specifically for that system to maintain high call quality. We typically find that these areas are either not configured or misconfigured, leading to issues with your phone system. By configuring these correctly and maintaining the equipment, you experience a much higher level of function and service.

The other equipment in your network needs similar maintenance in order to function as it is intended. When we look at the configuration of the servers we take over, we find a lot of them are misconfigured or under-resourced. We see this a lot with servers that are running virtual hosts but also find it on locally installed servers. By setting these up correctly and maintaining the patching, antivirus, etc. we are able to improve the overall functionality of your software and your network.

Maintenance of your network equipment also includes hardware like switches, wireless access points, and workstations. There are firmware updates and Windows updates that need to be maintained as well as watching for reboot cycles, antivirus, etc. When you are under our Managed Services umbrella, all of this is included. We schedule updates outside of business hours and handle all of it so you don’t have to think about it. When your entire network is configured correctly and maintained correctly, the number of issues you see is greatly diminished, which goes into improved uptime.

While maintaining your equipment is incredibly important to a quality network, it is also important to plan for the future, which we help with as well. We track your hardware warranties and original purchase dates so we can help you plan ahead for upgrades and replacements. All hardware will have an approximate lifecycle and by planning for replacing or upgrading equipment, we are able to keep you ahead of the technical issues that come from using equipment that is past its end of life.

This is a computer attack where a hacker locks you out of your systems and data. And you must pay a ransom, typically in Bitcoin, to get access again. While it is not a new crime, it is one of the fastest-growing crimes online. Because it is so lucrative to criminals. And thanks to Covid and Work From Home, more and more businesses are unintentionally opening themselves up to the threat.

In fact, it is estimated there are more than a hundred calls to insurers every day relating to problems caused by ransomware. Scary. Unless you take necessary precautions, your business could fall victim at some point.

But how do you know you’re not already under attack?

Because here is something most people don’t realize about ransomware.

If a hacker gets access to your systems today… they will not launch the attack straight away.

It can take around 60 to 100 days – if not longer – from the time you are breached, to the delivery of ransomware. It is possible that you already have unwanted visitors hiding in your network. Now that is a scary thought. You might be wondering why these cybercriminals spend such a long time launching their attack. They spend weeks or more just looking around, investigating your network for weaknesses, and waiting for just the right time to maximize their profit. Not only that, but weirdly, the longer they take, the harder it is for you to discover them.

So how do you know if you’re under attack? And what do you do if you are?

Here are 4 of the best ways for you (or preferably your IT service partner) to check your network is safe and secure. This guide is a little more technical than the ones we normally write. We will explain the concepts in a way anyone can understand, of course. But we must tell you about some specific technical things and software that can be signs of an impending attack.

1. CHECK FOR OPEN RDP LINKS

What’s an RDP link and how do you open or close it?

We don’t want to get too techy here, so put simply, an RDP (or Remote Desktop Protocol) is Microsoft technology that allows a local computer to connect to and control a remote PC over a network or the internet. You are probably utilizing this kind of thing if you’ve had any of your people working from home this year, as it makes remote access a lot easier. But RDP links left open to the internet are a very common route for cybercriminals to enter your network.

Scan for open RDP ports regularly and utilize multi-factor authentication for your links (multi-factor authentication is where you generate a code on a separate device to prove it is really you). Or have them behind a VPN (Virtual Private Network), which gives you a private network from a public internet connection. This really is a specialist job. Your IT service partner should be able to do it for you.

2. LOOK FOR UNEXPECTED SOFTWARE

One of the methods ransomware gangs use to take control of your system is certain software tools. It is important that you use a Network Scanner to check exactly what’s running and who’s running it. Often, cybercriminals will take control of just one PC first, perhaps using a phishing email to persuade someone to click on a bad link without realizing it. Once they have control of one PC, they can then target the entire network.

Sometimes, tools such as AngryIP or Advanced Port Scanner are used to do this. Check your network for tools like these. If they are present and your IT people have not installed them, it is possible you have a problem. Criminals also utilize tools to steal your passwords and login credentials. Tools such as Mimikatz and Microsoft Process Explorer. If you spot anything unfamiliar anywhere in your system, get in touch urgently with your IT support partner, who can investigate further.

3. MONITOR YOUR ADMINISTRATORS

Your network administrators typically have the authority over which applications are downloaded to your network.

What is the best way for hackers to download the applications they need? They create a new administrator account for themselves. Then they can download whichever tools they need to compromise your network. You need to be aware of software such as Process Hacker, IOBit Uninstaller, GMER, and PCHunter. These are all legitimate tools that could be used by any IT specialist.

In the wrong hands, they can be dangerous. Hackers can use them to disable your security software.

4. CHECK FOR DISABLED TOOLS AND SOFTWARE

Once the cybercriminals have administrator rights, they can locate and disable your security software.

You can tell that an attack is close to being launched if Active Directory and your domain controllers are disabled.

Next, any backup data the criminals have found will be corrupted. And any systems that automatically deploy software will also be disabled, to stop your attempts to update your computers after an attack. Something called PowerShell will then be used to spread everything across your network. It is worth remembering that this will all be done slowly. Your hackers will take their time because that makes it much harder to detect them. Many security tools only record traffic for a set period of time and are then reset. This means that there is no data held on the entry. Which disguises the attack until it’s ready to launch.

Once an attack has been launched and your data held to ransom, most of the time there is little you can do other than an attempt to restore backups. Or pay the ransom. The hackers have normally been so thorough with their preparation that even the best IT security specialists have few options open to them.

So, once you have detected that something might be wrong, what can you do to stop an attack from being launched?

This will stop attackers coming in again. And will also cut off their control access.

You can force a password change across your core systems, which will also throw your attackers out. However, it is worth noting that this is pointless if your RDP access is not cut off and controlled, as the attackers will just re-enter.

Monitor your administrator accounts. This may sound like a simple step, but you would be surprised at how often it’s neglected. You should also monitor and limit who can use PowerShell within your organization. Without getting into the details of what

PowerShell is; just know it’s a powerful tool you don’t want the wrong people playing with.

Keep all your software and security patched and updated. It is very tempting to click ‘later’ on updates. But saving a little time now is not worth the huge amount of time and money that you will lose should you become the victim of a ransomware attack.

Implement multi-factor authentication across all of your applications, if you haven’t already. This adds another level of security for your network and helps to prevent unauthorized access.

Finally, build your security from the ground up, and make sure every member of staff throughout the business – from CEO to entry-level worker – has regular security training. If everyone is aware of the risks and how to avoid them, it could stop a potential attack in its tracks.

Because this is such a highly technical subject, it is not something you or your team should tackle on your own. You need IT, security specialists, to take preventative action and monitor your systems regularly for early signs of problems.

Veeam-powered data protection

Provided by BizTech Solutions

Veeam Backup & Replication

Veeam^® Backup & Replication is the one solution for simple, reliable and flexible protection of ALL of your cloud, virtual and physical workloads. Take the stress out of managing your data protection, ransomware prevention and compliance challenges. With key features that allow you to completely manage your entire backup data lifecycle, Veeam saves you time and money, simplifying administration and minimizing costly downtime. Now you can focus on driving your business objectives forward with confidence.PRODUCT OVERVIEWREQUEST DEMO

• Continuous data protectionResiliency for your most critical workloads with near-zero RPOs
• Native immutable backupsData stays safe, ransomware
  stays out
• Archive-to-cloud20X less cost for long-term retention with immutability
• Instant recovery for NAS, databases and moreRecovery your data and apps
  in seconds

Veeam Backup & Replication add-ons

Monitoring, reporting and analytics

Level‑up with alerts, capacity planning, ransomware detection and more.

Veeam ONEOVERVIEW

Veeam DR Pack

Add the DR Pack, which includes Veeam Disaster Recovery Orchestrator, to a new or previous purchase of either Veeam Availability Suite or Veeam Backup & Replication and ensure business continuity for all your VMs (not just the most-critical ones)!

Veeam Disaster
Recovery OrchestratorOVERVIEW

Cloud native backup solutions

AWS- and Azure-native backup and recovery

Veeam^® Backup for AWS and for Microsoft Azure deliver cloud-native backup and recovery that’s purpose-built for the platform they protect to help users easily overcome ANY cloud data loss.

But what’s cloud-native? And why cloud-native?

Cloud-native means Veeam leverages the cloud provider’s technology and infrastructure to provide the best data protection possible for that platform in order to:

Deliver ultra-low RPOs and RTOs using native snapshots, fully automated for simplicity and scale

Control cloud costs by backing up native snapshots to low-cost object storage tiers

Secure data from threats by integrating with identity and access management services

Veeam Backup
for AWS

Veeam delivers native, fully automated AWS backup and disaster recovery to effortlessly protect and manage Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Relational Database Services (Amazon RDS) data.PRODUCT OVERVIEW

Veeam Backup
for Microsoft Azure

Veeam Backup for Microsoft Azure delivers enterprise-ready Azure backup and recovery to cost-effectively and securely protect your cloud data and easily overcome ANY data loss in minutes!PRODUCT OVERVIEW

Why backup Microsoft 365?

Microsoft 365 enables your business to work anywhere, anytime, without the need to host your own email, files and SharePoint infrastructure. Even though Microsoft hosts the infrastructure, this doesn’t replace your responsibility to backup business-critical Microsoft 365 data. The Microsoft 365 Shared Responsibility Model states:

With Microsoft 365, it’s your data — you control it — and it is your responsibility to protect it.

PRODUCT OVERVIEW

Did you know that 60% of sensitive cloud data is stored in Office documents, and 75% is NOT backed up? Veeam^® Backup for Microsoft 365 gives you the power to securely backup Microsoft 365 to any location and:

• Protect Microsoft 365 data from security threats and retention policy gaps
• Quickly restore with
  industry-leading recovery flexibility
• Meet legal requirements with efficient eDiscovery of Microsoft 365 items

45 ways to Restore from Microsoft 365 BackupsLEARN MORE

The power of license portability

The Veeam^® Universal License (VUL) is a flexible and portable solution for protecting multiple, different workloads on premises and in the cloud. Universal licensing makes protecting and restoring backups to cloud environments easier than ever and avoids additional fees that other vendors may charge.

Get the benefits of Veeam in a flexible, portable solution that meets your growing multi-cloud environment needs. VUL works for Veeam Availability Suite, Veeam Backup & Replication and Veeam Backup Essentials.

Realize your multi-cloud data protection strategy with ease!

• Universal PortabilityUniversal licensing enables on portable license type to be used across cloud, virtual and physical workloads with no hassle.
• Fully Featured!You don’t need to be a licensing expert. Easily manage a pool of universal licenses for all of your Veeam licensing needs.
• No Legacy Lock-inVUL uses a simple consumption model and is workload-, hardware- and cloud-agonistic giving you choice.