Skip to content

ESET Research discovers vulnerabilities in Lenovo laptops exposing users to risk of UEFI malware installation

  • Exploitation of these vulnerabilities would allow attackers to deploy and successfully execute UEFI malware such as LoJax and ESPecter.
  • UEFI threats can be extremely stealthy and dangerous.
  • Discovered vulnerabilities are: CVE-2021-3970, CVE-2021-3971, CVE-2021-3972.
  • ESET Research strongly advises all owners of Lenovo laptops to go through the list of affected devices and update their firmware.

BRATISLAVA — April 19, 2022 — ESET researchers have discovered and analyzed three vulnerabilities affecting various Lenovo laptop models. Exploitation of these vulnerabilities would allow attackers to deploy and successfully execute UEFI malware either in the form of SPI flash implants like LoJax or ESP implants like our latest discovery ESPecter. ESET reported all discovered vulnerabilities to Lenovo in October 2021. Altogether, the list of affected devices contains more than one hundred different laptop models with millions of users worldwide.

“UEFI threats can be extremely stealthy and dangerous. They are executed early in the boot process, before transferring control to the operating system, which means that they can bypass almost all security measures and mitigations higher in the stack that could prevent their operating system payloads from being executed,” says ESET researcher Martin Smolár, who discovered the vulnerabilities. “Our discovery of these UEFI so-called “secure” backdoors demonstrates that in some cases, deployment of the UEFI threats might not be as difficult as expected, and the larger amount of real-world UEFI threats discovered in the last years suggests that adversaries are aware of this,” he adds.

The first two of these vulnerabilities – CVE-2021-3970, CVE-2021-3971 – are perhaps more accurately called “secure” backdoors built into the UEFI firmware as that is literally the name given to the Lenovo UEFI drivers implementing one of them (CVE-2021-3971): SecureBackDoor and SecureBackDoorPeim. These built-in backdoors can be activated to disable SPI flash protections (BIOS Control Register bits and Protection Range registers) or the UEFI Secure Boot feature from a privileged user-mode process during operating system runtime.

In addition, while investigating the “secure” backdoors’ binaries, we discovered a third vulnerability: SMM memory corruption inside the SW SMI handler function (CVE-2021-3972). This vulnerability allows arbitrary read/write from/into SMRAM, which can lead to the execution of malicious code with SMM privileges and potentially lead to the deployment of an SPI flash implant.

The UEFI boot and runtime services provide the basic functions and data structures necessary for the drivers and applications to do their job, such as installing protocols, locating existing protocols, memory allocation, UEFI variable manipulation, etc. UEFI boot drivers and applications use protocols extensively.  UEFI variables are a special firmware storage mechanism used by UEFI modules to store various configuration data, including boot configuration.

SMM, on the other hand, is a highly privileged execution mode of x86 processors. Its code is written within the context of the system firmware and is usually used for various tasks including advanced power management, execution of OEM proprietary code, and secure firmware updates.

“All of the real-world UEFI threats discovered in the last years – LoJax, MosaicRegressor, MoonBounce, ESPecter, FinSpy – needed to bypass or disable the security mechanisms in some way in order to be deployed and executed,” explains Smolár. ESET Research strongly advises all owners of Lenovo laptops to go through the list of affected devices and update their firmware by following the manufacturer’s instruction.

For those using End Of Development Support devices affected by the UEFI SecureBootBackdoor (CVE-2021-3970), without any fixes available: one way to help you protect against unwanted modification of the UEFI Secure Boot state is to use a TPM-aware full-disk encryption solution capable of making disk data inaccessible if the UEFI Secure Boot configuration change.

For more technical information, check out the blogpost When “secure” isn’t secure at all: High-impact UEFI vulnerabilities discovered in Lenovo consumer laptops on WeLiveSecurity. Make sure to follow ESET Research on Twitter for the latest news from ESET Research.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

CyberLink Announces the Integration of Its FaceMe® Security Facial Recognition Software with AXIS Camera Station

The end-to-end integration brings FaceMe’s industry-leading facial recognition functionalities to AXIS camera and VMS setups, fusing live stream monitoring and group tagging in a seamless solution

TAIPEI, TAIWAN — April 15, 2022 — CyberLink Corp. (5203.TW), a pioneer of AI and facial recognition technologies, today announced an important update to its facial recognition security software, FaceMe® Security. FaceMe Security now integrates with AXIS Communications’ AXIS Camera Station VMS (video management software), creating a robust, unified platform that brings facial recognition to AXIS’s security and access control applications. With this solution, users can now layer person-of-interest detection, group tagging and management, and visitor summaries on top of existing IP surveillance configurations with AXIS cameras and VMS.

AXIS is a global market leader in intelligent security solutions, integrating network cameras, video recorders, workstations, and video management systems. AXIS Camera Station is an easy-to-use, efficient VMS platform offering video surveillance and access control applications. Its intuitive interface and extensive compatibility make it an excellent fit for FaceMe® Security, a value-added smart surveillance software solution powered by CyberLink’s highly-ranked and precise FaceMe® AI facial recognition engine.

The unified platform, combining FaceMe’s real-time facial recognition to the AXIS Camera Station interface, delivers a unique, efficient and powerful monitoring solution. One operator can visualize up to 36 camera feeds on one screen. They can then rely on the facial recognition console running on a second display to receive real-time alerts. These alerts are triggered when individuals associated to a managed group (e.g., VIP, blocklists, employees) appear in front of a connected camera located in an area or at a time potentially requiring a certain action to be taken.

“Smart video management software is becoming an essential component to security and access control systems,” said Dr. Jau Huang, CEO of CyberLink. “Adding the facial recognition capabilities of FaceMe to the AXIS Camera Station enables a powerful, highly automated security monitoring environment, running on one intuitive platform.”

For an introduction to the FaceMe®-AXIS integration’s new features, visit the FaceMe® Security website or watch the introduction video.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About CyberLink
Founded in 1996, CyberLink Corp. (5203.TW) is the world leader in multimedia software and AI facial recognition technology. CyberLink addresses the demands of consumer, commercial and education markets through a wide range of solutions, covering digital content creation, multimedia playback, video conferencing, live casting, mobile applications and AI facial recognition.  CyberLink has shipped several hundred million copies of its multimedia software and apps, including the award-winning PowerDirector, PhotoDirector, and PowerDVD.  With years of research in the fields of artificial intelligence and facial recognition, CyberLink has developed the FaceMe® Facial Recognition Engine. Powered by deep learning algorithms, FaceMe® delivers the reliable, high-precision, and real-time facial recognition that is critical to AIoT applications such as smart retail, smart security, and surveillance, smart city and smart home. For more information about CyberLink, please visit the official website at www.cyberlink.com

ESG Study Reveals Granular and Air-gapped Backup Are Key in Data Recovery After a Ransomware Attack

Nearly 90 percent of respondents admit that not all mission-critical data is protected from cyberattacks.

Copenhagen, Denmark – April 19, 2022 – Granular and air-gapped backup are critical to data recovery, when, not if, a business falls victim to ransomware. Those are among the key takeaways from a new Enterprise Strategy Group (ESG) study, titled “The Long Road Ahead to Ransomware Preparedness”, which surveyed information technology (IT) and cybersecurity professionals working within organizations across North America and Western Europe.

According to the report’s findings, while ransomware attacks aren’t always made public, they are a common occurrence and represent both a significant and recurring source of business disruption. Among the more than 600 respondents, 79 percent experienced a ransomware attack within the last year, with 17 percent experiencing attacks weekly and 13 percent experiencing attacks daily. 

More than three-quarters (79 percent) of the survey’s respondents said they categorize ransomware preparedness as being within the top five on their list of overall business priorities,

“Organizations are building their own individual strategies and processes in response to a lack of industry reference architecture or a blueprint for ransomware protection,” Christophe Bertrand, Practice Director at ESG. “The results of this report serve as a critical step in understanding the most important components of data recovery after a ransomware attack, and it is our hope that organizations can use this as guidance as they work towards preparedness.”

“The Long Road Ahead to Ransomware Preparedness” includes responses from 620 IT and cybersecurity professionals tasked with protecting against ransomware attacks at midmarket and enterprise organizations in North America (the United States and Canada) and Western Europe (UK, France, and Germany).

The study, sponsored by Keepit, the world’s only vendor-neutral and independent cloud dedicated to Software-as-a-Service (SaaS) data protection based on a blockchain-verified solution, sought to identify proactive and reactive strategies employed by organizations to guard against the ransomware threat, analyze ransomware mitigation best practices and identify how organizations are prioritizing and planning to mitigate the ransomware threat in the coming 12 to 18 months.

Other Key Findings Include: 

  • 56 percent of respondents admitted to having paid a ransom to regain access to their data, applications, or systems but only 14 percent got all their data back following payment. 
  • Only 1 in 7 organizations report protecting more than 90 percent of their mission-critical applications from cyberattacks.  
  • 39 percent of successful ransomware attacks impact cloud data, and 40 percent impact storage systems.   

Additionally, some trends identified in the study include:  

  • Cloud and storage systems are the most common ransomware targets across the board. 
  • Granular data restores are widely preferred as a best practice over full rollback restores. 
  • Granular and air-gapped backup have emerged as best practices among industry leaders, with hybrid methodologies favored. 
  • Backup is the clear leader for cyber recovery strategy and can empower organizations to refuse to negotiate with ransomers. 

“Public cloud infrastructure has become a destination of choice for data backup, which means that cloud data is increasingly becoming a target for cybercriminals who really want to render businesses inoperable. Organizations are concerned that their backup copies could be corrupted by ransomware attacks and protecting backup copies is a key prevention tactic,” said Jakob Østergaard, CTO at Keepit.  “Our strategy is to build in security from the ground up with immutable, blockchain-verified technology, encryption, and air-gapping, and the ESG study clearly documents how.” 

As an alternative to ransom paying, the ESG study revealed that air-gapped backup and the ability to granularly restore data have emerged as best practices among industry leaders, with hybrid methodologies favored. In the context of backing up cloud data, this means allowing the backup or recovery copies to be physically and logically separated from the rest of the network.

Air-gapping is a time-tested solution that allows backup or recovery data copies to be housed separately from the rest of the network. It is becoming a “must-have” technology when it comes to keeping cloud data out of reach of cybercriminals.  The ESG report demonstrates that IT leaders will be looking for these capabilities in their current and future backup solutions, which must be hybrid to support on-premises, cloud-only, or a combination of deployment topologies.

Access the Report

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Keepit
At Keepit, we believe in a digital future where all software is delivered as a service. Keepit’s mission is to protect data in the cloud Keepit is a software company specializing in Cloud-to-Cloud data backup and recovery. Deriving from +20 year experience in building best-in-class data protection and hosting services, Keepit is pioneering the way to secure and protect cloud data at scale.

How to Protect Cloud Environments Against Cyberattacks?

Cloud computing makes it possible to access files and applications over the internet without them being on local computers. This concept became popular in 2008 but refers to the solutions envisioned in the 1960s.

Being currently widely used, especially due to remote work – which has intensified with the covid-19 pandemic, cloud environments bring several advantages to users but require specific security measures to avoid cybersecurity problems, such as unauthorized access to data and the action of malicious agents.

For this reason, we prepared an article to explore what should be done to protect cloud services from major risks. To facilitate your understanding, we divided our text into the following topics:

  • What is a Cloud Environment?
  • Why Have Companies Opted for Cloud Solutions?
  • Main Risks Faced by Cloud Environments
  • 14 Tips for Keeping Secure in Cloud Environments
  • Learn the History of Cloud Environments
  • About senhasegura
  • Conclusion

Enjoy your reading!

  • What is a Cloud Environment?

Cloud environments are the virtual space that can be shared between people who are physically distant through an infrastructure that enables the communication between devices and data centers across the globe. 

Because of its ability to store these files, the cloud environment allows one to reduce hardware costs while expanding access to memory and processing resources. Moreover, it ensures more dynamism and productivity in the daily life of organizations and can make their operations fully digital.

There are some existing deployment models, which we will explain below:

  • Private clouds: In this cloud deployment model, hosting occurs privately, through a company’s own resources, and without sharing with other organizations.

In practice, companies use tools to have exclusivity in the operation of server infrastructure, which generates benefits such as flexibility and security. On the other hand, it is a service that can have a high cost.

    • Public clouds: Public clouds are those that users share, such as Google Cloud Platform, Amazon Web Services (AWS), and Microsoft Azure, which are the services most used by companies around the world. Their main advantage is that they are services with more affordable prices or even free-to-use. However, they do not offer the same security, flexibility, and possibility of customization as is the case with private clouds. 
  • Hybrid clouds: In turn, hybrid clouds consist of the combination of public and private clouds to meet the demands of a company. With this, organizations must choose which data to direct to each available cloud environment. This integration allows taking advantage of both models. 
  • Multi-clouds: The multi-cloud environment depends on the performance of several cloud providers to be considered. This can be very useful for companies since it allows them to take advantage of what each service offers best and avoid downtime — since all services may fail at some point.

It also allows them to reduce latency, enabling companies to choose the clouds located near their customers to ensure a better experience.

When we talk about cloud environments, it is also important to think about service models, which are complementary. These are:

  • Infrastructure as a Service (IaaS)

The great purpose of IaaS is to design an on-demand, multi-tooled, and easy-to-use cloud environment. This cloud layer is often used to create operating systems, as well as machines and virtual memories, among others. 

  • Platform as a Service (PaaS)

PaaS is composed of hardware that is virtualized and offered by providers as a specialized service. It allows one to perform tests and analysis of data and develop operations, and they are very useful to developers who need to integrate tests and applications, in addition to inserting frameworks.

  • Software as a Service (SaaS)

SaaS is widely used by the end-user when they access emails or applications such as CRM and ERP. Therefore, it is considered an external layer of cloud environments

  • Why Have Companies Opted for Cloud Solutions?

Many organizations have already adopted cloud environments in their daily routine due to the numerous advantages this feature offers. Below, we explain some of its benefits.

  • Cloud Environments Enable Data Loss Reduction 

Several factors can cause data loss, including natural disasters, power outages, and infrastructure problems. However, with cloud environments, it is possible to easily recover this data even remotely.

Thus, it is not necessary to interrupt your company’s activities for a long period, which could impact revenue.

  • Working with Cloud Resources Promotes More Security

Cloud environments have features that provide more security to data, such as encryption, which can make it difficult for malicious agents to operate, as it prevents unauthorized users from viewing documents.

  • Business Expansion Can Be Facilitated by This Solution

A company may need more space to run systems and store data as it expands. Cloud environments enable this expansion without the need to invest in many resources. 

  • It Is Possible to Reduce Costs with Cloud Environments

By using cloud environments, your company can reduce the number of costs, including the remuneration of professionals who make up a robust technology support team. In addition, it is possible to eliminate expenses with licenses and software and hardware updates.

  • Cloud Environments Provide More Agility to Work

With files stored in the cloud, their sharing is more dynamic, which provides agility to operations. Moreover, it ensures flexibility: your employees can access the data even if they are working remotely or traveling. 

  • IT Teams Have More Time to Devote to the Company’s Core Business

Several services are provided by cloud providers, exempting internal IT teams from worrying about these activities. As a result, they have more time to devote to the technology strategies associated with the organization’s core business. 

  • Technology Upgrades Become Easier and Less Costly 

Approximately every three years, it is necessary to upgrade the storage systems and migrate the data. This process is time-consuming and can be quite costly for those who do not use cloud environments. 

However, with data stored in the cloud, this upgrade becomes easier and has a more affordable cost. Simply add new nodes to the system, which reduces downtime. 

  • Main Risks Faced by Cloud Environments

Cloud environments must have the necessary support to provide security to the end-user. This is because this infrastructure is not immune to risks. The following are some challenges for those who deal with cloud resources:

  • With the covid-19 pandemic, many companies started using cloud services in most of their activities due to the significant number of professionals who started working remotely.

Therefore, the tendency is for support services to be overwhelmed, as traffic on the networks that connect these professionals to cloud resources increases.

Therefore, it is necessary to rely on a cloud provider capable of managing this load increase and offering uninterrupted service to the customer. 

  • When supporting cloud environments, providers should consider online events instead of face-to-face meetings, which have also increased with the covid-19 pandemic. It is possible, for example, to partner with telecommunications providers, increasing cloud support for these services.
  • It is also necessary that cloud providers are efficient enough to compensate for the cuts made throughout the pandemic with IT services.
  • Another important challenge is to understand how cloud services are used by organizations to establish policies that ensure their protection while providing ease of use and flexibility.
  • It is essential to keep in mind that cloud services and local area networks present different demands when it comes to security. In the case of cloud environments, the risks are more complex. Therefore, assessing these risks is part of the best security practices.
  • Working with cloud solutions makes operations more dynamic and faster, but IT departments must have visibility into the activities performed using the cloud to protect the interactions that occur in that environment.
  • One of the most common problems of companies using the cloud environment is incorrect configuration, which generates security vulnerability. These mistakes or important settings being ignored can be discovered by malicious users, causing financial losses and numerous other inconveniences. 
  • These attacks include Cryptojacking, which involves unauthorized operations with cryptocurrencies; E-skimming, which allows attackers to have access to data from visitors of the company’s website, damaging their reputation; and unauthorized access, which can result in theft of data for various purposes, such as selling it to other cybercriminals.
  • It is important to take the opportunity to design cloud code when addressing your requirements, protecting each relevant area in order to avoid the risks we have mentioned.
  • It is also critical to inspect network traffic and ensure security through virtual patching to combat vulnerabilities.
  • 14 Tips for Keeping Secure in Cloud Environments

Here are some tips to ensure cybersecurity in cloud environments:

  • Adopt the Hybrid Cloud Model

One of the possibilities for those who do not want to migrate all the data from the organization to the cloud environments is to opt for the hybrid cloud model, widely used by IT managers. 

This makes it possible to strategically direct some files to internal servers and others to the contracted cloud service, benefiting from the availability of the cloud while storing sensitive data locally.

  • Manage Credentials in the Environment

It is essential to have an IT professional capable of managing credentials and monitoring access to sensitive data, both in the on-premises data center and in the cloud. After all, having full control of the environment is what guarantees security in these two contexts. 

  • Invest in Encryption

When hiring a cloud service provider, make sure encryption is included, with verification protocols, coding rules, and algorithm strength.

You can also leverage cloud security with an extra layer of encryption and techniques associated with multifactor authentication (MFA). 

Some cloud providers provide encryption services, as well as traditional and third-party cloud software companies. 

  • Identify Sensitive Data and Understand How It Is Being Accessed

It is only possible to maintain the security of sensitive data in the cloud by identifying it and understanding how it is accessed. Therefore, it is of paramount importance to assess the protection of applications and folders in cloud environments, classifying data and understanding the context of user access to avoid risks.

So, invest in user behavior analysis (UBA) to monitor abnormalities and reduce data loss.

  • Understand What the Shared Responsibility Model Is

In a private data center, all security issues are the responsibility of the company. But when it comes to a public cloud, the responsibility is shared between the customer and the provider. However, according to Gartner, 99% of data leaks occurring in cloud environments are the responsibility of the customer.

So, each party must understand its role in this context, avoiding communication failures that put security at risk. 

  • Train Your Employees

The protection of cloud environments depends both on the tools used by IT professionals and on the awareness of all company employees about security practices.

After all, most of the vulnerabilities of IT solutions are associated with human actions, such as failures and misuse, and, in the case of cloud services, it is no different. 

Therefore, create a security culture and rely on IT professionals to disseminate it, with clear guidelines on who can access cloud environments, how this can be done, and what data to store. 

In addition to training the team as a whole, it is essential to invest in the constant training of the IT team. This is because new threats appear every day, and it is necessary to anticipate them.

  • Invest in IDPS

Intrusion detection and prevention systems (IDPS) are among the security features in today’s most efficient cloud environments. Its role is to monitor, analyze, and respond to network traffic in both on-premises and public cloud environments. 

If they encounter risks associated with signatures and protocols, these solutions alert about the abnormalities and promote the blocking of these threats, providing time for administrators to solve the problem. 

These features are important for real-time alerts and 24-hour monitoring. Without them, evaluating network traffic for signals that indicate a sophisticated attack may become unfeasible. 

  • Monitor The Use of Unauthorized Applications

The use of unauthorized applications to access the organization’s systems, a practice known as Shadow IT, also poses a risk to security in cloud environments. 

Moreover, remote work and the use of smartphones favor this type of interaction, which should be monitored by the IT department. 

  • Ensure the Security of Your Endpoints

With the use of cloud services, it is necessary to strengthen endpoint security. Therefore, analyze your strategies and ensure the protections used deal with current threats. 

Your endpoint defense plan should include: intrusion detection, firewalls, antimalware, and access control. But keep in mind that the use of automation features such as endpoint detection and response (EDR) tools and endpoint protection (EPP) platforms can be very helpful.

These solutions bring together continuous monitoring and automated response with traditional features, meeting security criteria such as internal threat prevention, endpoint encryption,  patch management, and VPNs

  • Count on Efficient and Reliable Providers

It is much easier to ensure the security of cloud services when you have efficient and reliable cloud providers. 

Therefore, research the reliability of these services and invest in a company that provides support to prevent crises and is able to act immediately when they occur. 

That’s because these systems are not immune to failure. However, with planning and adjustments, it is possible to have security in cloud services. 

  • Be Up-to-Date with Compliance Criteria

Companies that have access to their customers’ personal information, such as health organizations, need to comply with strict privacy and data security policies, including the LGPD.

Depending on your location or where this data is stored, additional criteria may be added. 

So, organizations must review their compliance criteria and hire a service provider capable of meeting their demands in this regard. 

  • Count on External Help

Nowadays, many companies offer services that have the function of enhancing security in the cloud. Therefore, if the internal security team has no expertise in this matter or if security features are not suitable for cloud environments, you should consider relying on the support of an external team. 

  • Run Penetration Testing and Audits 

Do you want to know if the procedures your company has are enough to protect its data in cloud environments? So, run penetration tests, regardless of whether you rely on the support of an external cybersecurity company or an internal team. 

Another essential measure is security audits, which allow analyzing the performance and resources of cloud service providers to know if security procedures are being followed. 

  • Enable Security Logs 

Enable security logs for your cloud services. This has helped system administrators track who makes changes to cloud environments, which is virtually unfeasible to do manually. 

If a malicious agent is able to access and make changes, the logs will show their actions so that they are corrected and avoided in the future. 

This record also allows the detection of users who have more access than necessary to perform their activities, favoring the adoption of the principle of least privilege. 

  • Learn the History of Cloud Environments

In the 1960s, computer scientist John McCarthy, known for creating the expression “Artificial Intelligence,” stated that it would be more useful to use computing in two ways: through time-sharing and utility computing.

Time-sharing refers to the sharing of a computer, with more than one person using it, in order to reduce costs and expand tasks. Utility Computing is characterized by the payment of the internet that was used, similarly to the charges for electricity.

In 1962, Joseph Carl Robnett Licklider created the Arpanet network, which enabled global data sharing, originating cloud computing.

Currently, the cloud is part of the routine of individuals and legal entities, as it makes it possible to edit files, watch online series, store documents, send emails, among other capabilities.

But there are different types of cloud, such as public, private, and hybrid, covered in this article.

  • About senhasegura

senhasegura guarantees the digital sovereignty of organizations. This is because it acts by avoiding traceability of actions and loss of information on devices, networks, servers, databases, and cloud environments.

Our services are also useful to bring our customers into compliance with audit criteria and strict standards such as PCI DSS, Sarbanes-Oxley, ISO 27001, and HIPAA.

  • Conclusion

By reading this article, you saw that:

  • Cloud environments are virtual spaces where files are shared between people who are physically distant through a server that enables the communication between data centers and devices.
  • There are different types of clouds, such as private, public, and hybrid clouds.
  • Cloud environments also refer to service models: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS).
  • Cloud solutions ensure several advantages for businesses, such as reducing file losses, more security and lower costs with IT teams, as well as scalability for the business.
  • Users of cloud environments need adequate support to ensure the security of data stored in the cloud, which increases more and more with remote work.
  • Working with cloud solutions ensures more dynamism for operations, but it is essential that IT departments have visibility of the activities performed in this environment to ensure security.
  • When a company uses a public cloud, the security responsibility is shared between the organization and the provider, so each one must understand their role to ensure data protection. 
  • It is essential to train employees to access cloud environments without creating risks for organizations.
  • Similarly, IT teams must undergo frequent training to anticipate new threats that constantly arise.
  • It will often be necessary to rely on the external help of trusted vendors and conduct audits that enable an analysis to know if cloud service providers are performing the necessary security procedures.
  • We also covered the history of the cloud, which began in the 1960s.

If our article on cloud environments was helpful to you, share it with others who might be interested in the subject. 

ALSO READ IN SENHASEGURA’S BLOG

What Are the Main Cybersecurity Vulnerabilities in Industry 4.0

SSH Keys: Learn More About the Importance of Secure Control

Invest in Disaster Recovery Strategies and Avoid Damages to Your Company

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Segura®
Segura® strive to ensure the sovereignty of companies over actions and privileged information. To this end, we work against data theft through traceability of administrator actions on networks, servers, databases and a multitude of devices. In addition, we pursue compliance with auditing requirements and the most demanding standards, including PCI DSS, Sarbanes-Oxley, ISO 27001 and HIPAA.

Top 16 best network monitoring tools

As market and monitoring software evolve, deciding which of all network monitoring tools implement on your business becomes a difficult choice.

To help you choosing wisely, we have analyzed and compared the current best monitoring tools that solve your network monitoring requirements (both free and licensed).

Network monitoring tools in deep

Network monitoring is one of the most important sectors within all kinds of network tools. What we’ve done on this occasion is to use our experience with infrastructure monitoring tools to implement all of them for you to have the most complete analysis.

The objective is not to show that Pandora FMS is the best solution in network monitoring, but instead we mean to give a wide vision of all different solutions, so you can choose the best tool that adapts to your needs. Every installation is a world apart, and not all network tools are valid for every different environment.

Table of contents

  1. When to deploy a network monitoring tool?
  2. Network monitoring benefits
  3. Presales monitoring tool checklist
  4. Top 16 best monitoring tools & software review and comparison

Due to the success of the present article and the number of questions we have received, with queries about the different tools and softwares available and our criteria for choosing the right one for you, we have updated our analysis for you to have the most complete post.


 

Do you want to know more about network monitoring?

Remote networks, unified monitoring, intelligent thresholds… discover network monitoring in Pandora FMS Enterprise version.


When to deploy a network monitoring tool?

To ascertain whether this is the article you’re looking for, we’ll take a look at the conditions that determine if you need to install a network monitoring tool. Obviously, if you are already using network monitoring in your organization and just wish to upgrade the tool you use at the moment, you’ll know what we’re going to talk about here; just go ahead to the next section (network monitoring benefits).

For anyone else who is considering the topic for the first time, ask yourself:

  • Does my organization depend on network availability?
  • Is managing an ever-expanding IT infrastructure becoming overly time-consuming?
  • Is the growth of network traffic in my infrastructure exposing bottlenecks? Is the network scaled to optimize all my resources?

If these questions sound familiar, this article will help you answering them.

Network monitoring benefits

If proper software is chosen, main benefit of a network monitoring system is reducing costs, by avoiding company downtime and unproductivity periods. Even if you’re not motivated by profit, any organization (ONG, healthcare, public transport services…) can equally benefit by reducing lost time and streamlining their infrastructure.

Network monitoring and IT monitoring allow you to optimize both processes and resources. By giving you a global perspective of your infrastructure, you can see which nodes are bearing the strain of traffic, where you might need extra hardware and where your system is not scaled correctly. You can see where data is clogging up your system, and why and also what to do to sort out the situation.

This kind of software not only provides a heads up on when a problem is coming down the pipe, but how to avoid said problem or stop it from turning into a headache.

With a solid monitoring tool and a proper implementation, you will be able to detect malicious traffic, where is coming from and how to cancel it.

Even though, you will be capable of generating time-stamped data logs, allowing the system administrator to build up a collection of historical data that is invaluable both for analyzing how problems have been solved in the past, how your network responded to previously-logged events and allowing for prediction of how your system will behave in the future.

Presales monitoring tool checklist

We know better than anyone, that choosing the right network monitoring tool within the wide range of options that are available is a hard and complex issue. Furthermore, choosing the wrong one would certainly mean loosing time and money. Here at Pandora FMS’ headquarters, we have performed many installations based on previous wrongly implemented software.

In order to avoid these kind of implementation errors, we have created a presales checklist that covers all main elements that must be taken into consideration before choosing a monitoring tool.

  • Check that the software you’re interested in does not only monitor networks, but that it can also scale up in the case of a network expansion, with devices that includes apps, or hardware like servers, routers or switches. Making the right choice is the difference between growing smoothly, keeping everything under the oversight of a single tool, or incorporating more third-party software and losing the global, unified oversight a good network monitoring tool provides.
  • Keep in mind the question of compatibility. Are the servers and applications you’re already running going to be compatible with the new network monitoring software?
  • Be careful with licenses. Some companies take advantage of clients scaling up to introduce new licensing costs. Enquire about the cost of any additional licenses in the case of introducing new elements or components into your infrastructure.
  • Your software configuration and its management is very important. Some monitoring tools involve complex, almost bespoke, configurations that later require a more costly level of competence on behalf of your system administrator, making them almost essential for your company. We have seen cases of companies changing their monitoring tool because their system admin has left.
  • Ask your provider about their product’s scaling and performance capacities. Apart from the functional scalability already mentioned, network monitoring can also cover thousands of nodes and other elements under its aegis. In an interconnected world, businesses need to monitor other devices that are connected to its infrastructure, such as cell phones, vehicles or cash registers. In cases such as these is vital that your monitoring tool can provide monitoring to all these thousands of extra devices with maximum efficiency and performance.
  • To incorporate all these inevitable extra devices find out if your chosen tool comes with an API capable of integrating with other applications.
  • Alerts management. While it isn’t a problem managing alerts while you’re sat at the dashboard of your tool, what about when you’re not? Your chosen tool should be able to use multiple communication channels (email, SMS, messaging platforms) and them to be flexible enough to handle both the contents and the requirements of each platform.
  • If you’re working with virtual systems it’s imperative that your network monitoring software is also able to monitor those as well. With the idea in mind of expanding your virtual systems, does your tool monitor all your virtual and also the virtual infrastructure itself? Ditto for containers.
  • Do you need to inventory the components of your infrastructure and see them in a simplified way? Do you need to monitor offsite elements? If the answer is “Yes”, keep that in mind when you’re comparing softwares.
  • Monitoring embedded systems is another point to consider if you’re monitoring hardware that doesn’t use conventional systems. In Pandora FMS, for example, we’ve monitored fleets of buses, allowing operators to know the status of each vehicle thanks to monitoring their mechanical hardware.
  • Another aspect to bear in mind is generating and delivering reports. You need to show the status of the network to non-technical people, in a clear, exportable format, and directed at specific recipients who need different information. A one-size-fits-all is not acceptable here, which is why some monitoring solutions include customizable reports.
  • Monitoring with agents or agentless monitoring? The age-old question of whether you need to deploy agents will depend on the nature of your IT environment. Sometimes it isn’t possible to deploy an agent, and sometimes it’s the best solution on offer. Will your chosen monitoring tool allow you to decide?
  • Remote monitoring. If the networks to be monitored are geographically, or organizationally displaced, remote monitoring is your friend and ally. Keep disparate networks under observation from a central GUI.
  • Cloud monitoring. If all, or part, of your infrastructure isn’t already in the Cloud, it will be sooner or later. Does your network monitoring tool allow for hybrid monitoring (your own CPD and Cloud installation), and to consolidate everything in the same dashboard?
  • Saving and analyzing historic data is a crucial element of your network monitoring tool. It’s not only important to know what’s happening in real time but also to analyze past data, in order to make better informed decisions, and to modify your tool accordingly. Network monitoring is based on learning from historic metrics.
  • Finally, the GUI. Is it adaptable to your current and future requirements? Will its functionalities scale up as your system does?

Note: all tendencies commented on this article are measured on a worldwide scale.

Top 16 best network monitoring tools compared

As we said at the beginning, we are going to analyze all the monitoring software you can obtain today for you and your organization. We will summarize each tool and its usage trend in order to analyze pros and cons of using them.

Finally, we will talk about Pandora FMS as a comperhensive monitoring solution. A tool that, if you would like to monitor more than 100 different devices with its Enterprise solution, you can try 30 days for free.

1. Nagios

Nagios is probably the best known free tool, and it comes to no surprise since they’ve been working in the U.S. since 1996 to build this monitoring software. Nagios’ core is the most important part of the tool and allows you to build plugins to monitor single elements.

It’s interesting to see how the demand tendency on the Internet has been diminishing with the passage of time. What before was one of the most potent and well-known network tools, is losing terrain.

Interes mundial sobre Nagios

It’s large-scale use is due to the fact that it was the first one to develop a tool that covered unexpendable characteristics in a network monitoring process. For this reason, Nagios was very popular. Furthermore, given its great initial market penetration, it’s still quite used.

You can find in depth comparison between Nagios, Zenoss, Cacti, Zabbix and Pandora FMS in these articles:

In a nutshell, Nagios was the origin for monitoring and, as a matter of fact, lots of new network monitoring tools have inherited the Nagios code and made it evolve. Even though you may have a lot of professional profiles on the market, these must have a very vast knowledge of the program, and your installation will depend on them 100%. Future migrations may also be complicated.

Open version:  yes

Nagios PROS

  • There are a lot of professional profiles with Nagios experience
  • If there is a good knowledge of the tool involved, manual configuration can turn Nagios into a very powerful tool to monitor isolated or particular cases
  • It has a large plugin offer to adapt the product to the user’s final needs
  • Basic configuration is very easy

Nagios CONS

  • Editing or configuration processes are difficult due to the necessity to make manual modifications in order to properly set up the tool
  • The GUI lacks user-friendliness.
  • Steep and costly learning curve
  • Every installation ends up being a “puzzle” where rather than having a standard product, we finish with a personal appliance with hundreds of patches, self-made or third-party codes. All this apart from it being complicated to evolve or maintain by said third-parties.
  • Simple reports
  • Very lacking when it comes to SNMP, both in polling and trap management.

2. Zabbix

Developed by a Lithuanian company in 2005, Zabbix is known for being easy to configure and for having a very powerful GUI. It’s performance starts to decline when a large quantity of nodes is to be monitored. It’s agentless monitoring service stands out above the rest in its category.

Experience tells us you can monitor up to 10,000 nodes without performance issues.

We’ll show you the interest rate graph for Zabbix:

Interes en la herramienta de monitorizacion Zabbix a lo largo del tiempo

We’ve got the feeling that many Nagios users are moving over to Zabbix because it’s picked up on Nagios’ glove and it begins to have the visibility that Nagios used to have. The problem that we can see here is with its scaling on larger CPD’s. We have to tread carefully if our installation has various elements of the same type (for example databases) because their configurations will be complicated.

More in depth comparison here: Zabbix vs Nagios vs Pandora FMS.

Open version: Yes, Zabbix is an open software.

Zabbix PROS

  • It has quite an active community
  • At low levels, it’s still very strong and efficient.

Zabbix CONS

  • Even though it has been used for large installations, starting at 1,000 nodes its performance can be diminished
  • It’s difficult to create and define alert and report templates. Configurations can require many clicks and steps to be completed
  • It doesn’t include real-time reporting
  • Difficult to purge when there are errors
  • Poor SNMP trap treatment

3. GroundWork

An American company that reuses different software elements from Nagios, Icinga or Cacti to create a global solution. It has managed to be among the top ranked network monitoring tools thanks to its mashup of other tools.

Our experience with GroundWork hasn’t been bad, but we’ve seen complications when integrating its different modules. Also, it doesn’t have many plugins developed. For larger environments it falls short. It doesn’t show an extensive history when we monitor a lot of nodes and it doesn’t support platforms such as HP-UX or FreeBSD. If you don’t possess a large CPD  or lots of free time to tinker, we recommend checking it out since they have an interesting approach.

It’s search trend is, compared to others, residual and only focused on US market.

Open version: Yes.

GroundWork PROS

  • Has a powerful Cloud monitoring: AWS, Azure, CLoudera, Docker, Google Cloud, NedI, NetApp, OpenStack o VMware.

GroundWork CONS

  • Is not widely known
  • Lack of user community
  • Has not many plugins

4. Zenoss

Zenoss comes from an American enterprise that has created this software to monitor storage, networks, servers, applications, and virtual servers. It’s agentless monitoring is what makes it stand out. It has a “Community” version with very few features and a full-feature Commercial license.

Zenoss may seem interesting if you don’t really want to invest in monitoring software. If you don’t have that many machines and you don’t plan on investing in support or large features, then you can count on Zenoss as one of your network tools. Be careful though, Zenoss version 5 requires a very potent machine to run properly.

This is the internet trend that sees Zennos as a monitoring solution:

Interes a lo largo del tiempo de Zenoss software

Open version: Yes, but it may just be too limited

Zenoss PROS

  • All terrain regarding platforms. It’s capable of cross-platform monitoring
  • It presents a very flexible and tweakable dashboard, which is quite powerful as well
  • Great flexibility and potential in the event management offer.

Zenoss CONS

  • Depending on the installation’s complexity and on what elements need to be monitored, adapting it can be a rough task
  • The DataBase layer can get large and heavy in large environments.
  • The panel can be slow on certain installations.
  • It only has MySQL and its own database, lacking integration with other DataBase systems.
  • Topology maps are one of the weakness of the product.

5. Monitis

Focused toward small or medium-sized companies. It’s for them that this can arise as a great network tool, and for this reason we’re counting it among the 15 best network monitoring tools.

If you’re a small company, this may be the tool that best suits you. We do recommend you use the fully licensed version, since the free one is kind of basic and can be easily rendered useless unless you’re running a blog or similar webpage. If you’re a small company, this may be the tool you need.

This has been the trend evolution of Monitis monitoring tool:

Interes en Monitis como software de monitorizacion

Open version: There really is none. Although, they do offer their monitor.us version, but its features are really basic and recommended for simple websites or blogs.

Monitis PROS

  • Includes web transaction monitoring
  • Allows the user to monitor common cloud applications such as Amazon or Rackspace
  • Wonderful GUI which is both customizable and dynamic
  • Real-time reporting

Monitis CONS

  • Very focused on Linux and Windows
  • Has difficulties to add ad-hoc monitoring
  • Doesn’t have a free unlicensed version

Free version: There really is none. Although, they do offer their monitor.us version, but its features are really basic and recommended for simple websites or blogs.

6. Icinga

Icinga comes from part of the Nagios core, over which the GUI was improved. It can be integrated with many databases and its REST API interface is outstanding for integrating other applications. It’s focused on complex networks and monitoring protocols, machine resources and servers.

In 2009 a Nagios fork was created, and since then it’s followed its own path. In its last version (released 2014) they tried to fix performance issues by rewriting the core code. We think that it’s taking the same route as Nagios. It was well received back in 2009, but after a great launch, it started to fall back in demand terms. This is yet another monitoring tool that uses the Nagios core.

Evolucion del interes en Icinga que parte del core Nagios

Open version: Yes

Icinga PROS

  • Nagios core clone, technically improved.
  • Most of Nagios plugins and extensions work on Icinga

Icinga CONS

  • As Nagios, most of its configuration is based on scripts / text files.
  • It’s hard to integrate modern systems that requires more dynamism (virtual environments, cloud…)
  • Steep learning curve.

7. Manage Engine / OPManager

Manage Engine belongs to the Zoho Group, the giant enterprise conglomerate from India, and it’s one of those monitoring softwares to keep in mind. It’s tendency regarding demand is slightly on the rise.

Evolucion de las busquedas de manageengine a lo largo del tiempo

What we should warn about is its really steep learning curve, which may be expensive in resources, money and time in the beginning.

Open version: Non-existent

ManageEngine PROS

  • Easy to install
  • Very friendly GUI
  • Offers a very wide range of features to cover

ManageEngine CONS

  • Complex configurations that require a lot of documentation. Very steep learning curve.
  • Complicated user experience when navigating through its screens
  • Alarm levels limited to basics (warnings and critical status)
  • Only available on Linux and Windows
  • Lacks inventory and event correlation
  • Non-existing features for large environments that are acostumed to work with events, deployment on large architectures, etc.

8. Observium

Observium is a multiplatform web monitoring tool (mainly focused on Linux, Unix, HP). It’s a good tool, but it lacks basic features which in some cases we can recommend complementing with Nagios or Cacti.

Evolucion del interes en Observium a lo largo del tiempo

Open version: Yes.

Observium PROS

  • Graphs on Observium are known for their amount of detail and its careful design. It’s interesting for showing command panels on management levels.
  • Easy and useable interface
  • Capable of monitoring large installations

Observium CONS

  • We weren’t able to configure alerts on the free version.

9. Op5 Monitor

One of the monitoring tools that’s more focused on hardware, network traffic, and service monitoring. It’s based on Nagios as well.

It has the capability to monitor multiple platforms. It also monitors cloud systems and virtual environments. We can highlight it’s capacity when it comes to large environments and its scaling on these.

From 2008 to 2010 it had a raise in demand. Ever since then, it’s slow descent has begun. Its market is still Sweden, its country of origin.

Op5 Monitor y su demanda online

Open version: They have a free version

Op5 Monitor PROS

  • Easy to use
  • Very good load balancing system

Op5 Monitor CONS

  • Hard to extend features and monitoring processes on our own.
  • It won’t allow deployments from the console, so they have to be done manually

10. Opsview

A tool focused on network and application monitoring. It began developing in 2003, and like many other tools seen here, it started from a version of Nagios. It has a free version available.

In our office we personally like this product quite a lot, even if its demand is declining. Be careful with the tool’s performance.

The demand tendency for OPSView is quite similar to that of OP5, until 2012 it has a large raise, and from then on its decline has been quick.

Demanda de OPsView

Open version: Yes

OpsView PROS

  • It’s a rewritten Nagios, some of its plugins works in OpsView

OpsView CONS

  • Very rigid monitoring panel
  • Limited reports that cannot be exported
  • The amount of developed plugins is reduced

11. PRTG Network Monitor

Network monitoring tool that stands out for its greatly designed and easy to use interface. It has a great vantage point when it comes to configuring alerts flexibly and because of its report generating capacities. The free version (which is NOT open) is limited to monitoring 100 application types.

PRTG  is an application that can only be executed on Windows machines as a part of Microsoft Network Monitoring. Anyway, we highlight that the monitoring is multi-platform and is also able to monitor virtual systems and cloud applications. It can also generate real-time reports.

Despite decreasing, its trend has been stable throughout the years:

PRTG Network Monitor como software de monitoreo y su evolucion en trafico

Open version: Yes, but very reduced.

PRTG Network Monitor PROS

  • Very nice interface with awesome data navigation possibilities.
  • You can access monitoring from mobile devices
  • Reports can be in PDF/HTML formats
  • Very powerful and flexible alert system

PRTG Network Monitor CONS

  • Certain plugins require additional Microsoft user licenses, therefore costs can skyrocket easily
  • Limited scalability
  • Very rigid when implementing its own checks
  • Hard to deploy in environments with a complex connectivity
  • Quite inefficient when it comes to server or application monitoring

12. Solarwinds

Solarwinds is a network monitoring tool that excels for its automatic network and node mapping, without the need to manually activate it. This is added to a very powerful GUI that allows you to easily view your network topology and its status. Solarwinds also allows integrating virtual machines in its monitoring.

A very good option for medium sized companies that can afford the license costs (it’s one of the most expensive tools).

Its tendency shows that after a crushing success experienced during 2004 and 2005, a descent happened in which they’re now relatively stagnated. In fact, December 2020 abrupt rebound, far from being positive, marks the worst moment in Solarwinds Inc history, as it comes from the official notice of the hack Solarwinds systems suffered throughout several months.

Solarwinds a lo largo de los anos y el efecto del hackeo de Solarwinds

Open version: No.

Solarwinds PROS

  • Great GUI
  • Wonderful community backing it
  • Mobile device access

Solarwinds CONS

  • File and manual configuration for alerts
  • The report generation system still has room to improve
  • It doesn’t have integration with cloud applications such as Amazon
  • You cannot perform all actions from the same panel and you’ll always require to access other tools
  • Its licensing forces the user to constantly look at every check performed, since licensing is individually done for these.

13. Whatsup Gold

Whatsup Gold is one of the best network monitoring tools when it comes to balancing system loads. Its scaling is horizontal and allows the use of various processes to distribute loads. It’s capable of performing some automatic actions based on events that have occurred.

Just like other tools like SolarWinds or Pandora FMS, it has a system to discover networks and topologies.

By creating proprietary scripts you can add and integrate more applications or services within the monitoring.

We can also connect from mobile devices to access the monitoring panel. Alerts can be set to be sent via email, SMS or through other options and information is offered in real time.

Despite that, search trend is decreasing:

Whatsup Gold como herramienta de monitoring

Open version: No.

Whatsup Gold PROS

  • Easy to configure and process network discoveries
  • Reports

Whatsup Gold CONS

  • Navigation and console are not that intuitive
  • Configuration is split between web configurations and manual configurations on the console
  • Limited scalability
  • Quite poor for monitoring servers or applications

14. OpenNMS

After the large number of requests to review this monitoring tool, we have reviewed and added OpenNMS to this list.

OpenNMS is a 100% open source network monitoring tool, with no licensing requirements. The business model is to offer the software free and monetize it through consulting services, provided by the OpenNMS group, who administrate the product, through various business lines, including training and support services.

As one can see in the graph, demand for OpenNMS has been on a steady decline for the last decade.

OpenNMS a lo largo del tiempo

Open version: Yes.

OpenNMS PROS

  • It’s a flexible and high-capacity network monitoring tool, but one of its chief problems is the steep learning curve associated with it, plus an unintuitive GUI.
  • Integrates well with alert systems supports like SMS and email.
  • An active community around the tool, and a detailed wiki.
  • Can perform similarly to other, licensed products, but requires more time to learn to use and to configure

OpenNMS CONS

  • Requires a “hands-on” style of configuration, based on script editing and XMLs. In this aspect, it resembles Nagios a lot, in that a manual configuration can lead to highly idiosyncratic installations which can be difficult to decipher.
  • Importing third-party MIBs can be problematic.
  • The reports it is capable of generating are not polished enough for executive/management eyes, being quite basic visually, and without the possibility for fine-tuning intervals. In fact, it can’t present information in real-time, nor fine-tune intervals to below 24 hours.
  • Most importantly, OpenNMS, as its name suggests, is focused on network monitoring, and does not cover the full range of services which a more complete monitoring service can provide, such as server or application monitoring, and much less business processes and user experience. Due to its lack of agents, the information it can retrieve from the system under monitorization is limited to what is retrievable through SNMP, and that is not enough when it comes to monitoring applications or elements of server infrastructure. In some cases (not our own) it has been possible to use Nagios agents in an OpenNMS integration, although we can’t consider that an optimal solution.

15. Cacti

Cacti is a comprehensive monitoring solution for network graphic generation, designed to harness storage power and functionality for RRDtool app graphics.

Its user interface is easy to use, which is convenient for LAN sized systems.

Search trend Cacti evolution still has a solid foundation:

Evolucion del interes sobre Cacti herramienta de monitorizacion

Open version: Yes, it only has open version.

More in depth comparison here: Cacti vs Nagios vs Pandora FMS in depth comparison

Cacti PROS

  • Easy to instal and use.
  • Does what it say it does and makes what you expect from it.

Cacti CONS

  • Basic.
  • It’s only used for display data in graphics.
  • More modern tools (grafana) are replacing it.
  • It does not scales ok.
  • Some basic functionalities are missing in a monitoring environment (events, notifications, reports, SLAs, network maps, dashboards, multitenancy…).

16. Pandora FMS

The open version is capable of monitoring over 10,000 nodes and covers (without limitations) network, server (both with agents or remotely), and application monitoring. With features full of reports, alerts, and third party integrations through API, etc.

Differently from others, it doesn’t have Nagios core as a starting point. Instead, Pandora FMS created its own architecture from scratch, which allows perfect scaling for large environments. A network with over 100,000 nodes has been monitored with Pandora without performance issues (with the Enterprise version).

We also highlight its integration on mobile devices, which not only allows access to the console, but also to monitoring, thanks to its geolocation system.

Its network autodiscovery system is capable of finding all the elements that compose your network in a short time.

Time search evolution in Pandora Flexible Monitoring Software has been stable, with some isolated variations:

Evolucion del interes en pandora fms a lo largo del tiempo

Open version: Yes.

More in depth comparison here:

Pandora FMS PROS

  • Capable of every monitoring type (servers, networks, applications…) with a single console.
  • Great flexibility and scalability (dozens of thousands of devices).
  • Dynamic network maps, reports, SLA’s, integrated notifications, service’s maps, events, logs…, and more.
  • It’s an all-in-one monitoring software.

Pandora FMS CONS

  • Community not as big as Zabbix’s or Nagios’

Conclusions

We know that there’s a lot of competition and many options, and it is honestly quite difficult to choose the best option. With this monitoring tool comparison guide you’d have all you need to make proper decision

Most network monitoring tools that we mention are meant for small and medium enterprises. It’s difficult to find tools for large companies that actually cut it for them in performance, and that also support different technologies and protocols that this type of company needs. Within this category we can mention ZenOSS and Pandora FMS.

You should also take into account that this article discusses network monitoring tools and, today, it’s more important not only to know the status of networks and applications, but to be able to understand how a business works, from the bit that goes along a network cable, to sales being done at a specific time by a specific company. This point is related to business activity monitoring, or operational intelligence; but that’s better left for another article.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About PandoraFMS
Pandora FMS is a flexible monitoring system, capable of monitoring devices, infrastructures, applications, services and business processes.
Of course, one of the things that Pandora FMS can control is the hard disks of your computers.

Claude Morings Jr, Global Product Support Manager

It’s been an exciting month for us here at CloudM as we get set to officially launch our US subsidiary, CloudM Inc. With over 10 years of experience in the US market already, this natural evolution promises to deliver an even better customer experience for our amazing North American customers.

What better time to celebrate the staff that have supported our US market and made this next step possible. And, who better to speak to than US employee no.1 – Claude Morings Jr.

Hi Claude – Tell us a little bit about yourself?

Hey! I’m the Global Product Support Manager here at CloudM. I joined 4 years ago (this month to be exact) as CloudM’s very first US employee.

 

Wow! And now we have 13 US based employees and growing, with a US subsidiary being established. You must’ve seen some changes in the past 4 years

Absolutely. Personally, I’ve been able to grow the Support Team out from a solely UK based operation to a truly global department, with dedicated, knowledgeable staff located around the globe (including APAC), delivering true 24 / 7 support.

None of this was in place, and to have that set on my shoulders as a deliverable when accepting the role was a lot of pressure. But, it has created the amazing support team we have now, which I’m extremely proud of.

In the US, helping the business get the right people in place and seeing the business grow to generate the revenue to get here, establishing CloudM Inc., has been so rewarding. In the last year alone, the number of US based employees has skyrocketed and it’s only set to continue. That can only be good for our customers.

So, what do you enjoy about working at CloudM?

Firstly, my team. My favorite parts of the week are when someone within the team achieves a goal, receives good feedback, or puts a process in place that benefits them and their colleagues. I was given the opportunity to build the team and put people in those positions to showcase their talents so it feels like validation.

I really like how we make remote working work, even across multiple time zones and regions. It’s great to feel like one team with colleagues across APAC, Europe and North America (from sea to shining sea).

Saying that, getting the opportunity to meet up in person is amazing. I’m from a small town in North Carolina, and while I have traveled across the world during my 12 years in the Army, my family is amazed when I tell them I’m visiting the head office based in the UK or that I get to go to Spain for a company kickoff meeting.

What is your favorite CloudM value?

My favorite value is to appreciate others. I can crack on, try new things, and get involved, but showing others that they’re appreciated (and feeling appreciated) makes the other values easier to achieve.

Any advice for someone looking to join the CloudM team?

It will be challenging, but we will have fun and you will feel supported. At CloudM, you will only fail if you choose to. The team here is pretty good at circling the wagons around someone who needs extra assistance, sharing their own experiences and knowledge.

It’s a great time to get involved. The CloudM team, globally and in the US, is growing and there are so many opportunities for personal and career growth. If you are hard working, eager to learn and challenge yourself, CloudM is a great place to work.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About CloudM
CloudM is an award-winning SaaS company whose humble beginnings in Manchester have grown into a global business in just a few short years.

Our team of tech-driven innovators have designed a SaaS data management platform for you to get the most from your digital workspace. Whether it’s Microsoft 365, Google Workspace or other SaaS applications, CloudM drives your business through a simple, easy-to-use interface, helping you to work smarter, not harder.

By automating time-consuming tasks like IT admin, onboarding & offboarding, archiving and migrations, the CloudM platform takes care of the day-to-day, allowing you to focus on the big picture.

With over 35,000 customers including the likes of Spotify, Netflix and Uber, our all-in-one platform is putting office life on auto-pilot, saving you time, stress and money.

CyberLink Announces the Integration of Its FaceMe® Security Facial Recognition Software with AXIS Camera Station

The end-to-end integration brings FaceMe’s industry-leading facial recognition functionalities to AXIS camera and VMS setups, fusing live stream monitoring and group tagging in a seamless solution

TAIPEI, TAIWAN — April 15, 2022 — CyberLink Corp. (5203.TW), a pioneer of AI and facial recognition technologies, today announced an important update to its facial recognition security software, FaceMe® Security. FaceMe Security now integrates with AXIS Communications’ AXIS Camera Station VMS (video management software), creating a robust, unified platform that brings facial recognition to AXIS’s security and access control applications. With this solution, users can now layer person-of-interest detection, group tagging and management, and visitor summaries on top of existing IP surveillance configurations with AXIS cameras and VMS.

AXIS is a global market leader in intelligent security solutions, integrating network cameras, video recorders, workstations, and video management systems. AXIS Camera Station is an easy-to-use, efficient VMS platform offering video surveillance and access control applications. Its intuitive interface and extensive compatibility make it an excellent fit for FaceMe® Security, a value-added smart surveillance software solution powered by CyberLink’s highly-ranked and precise FaceMe® AI facial recognition engine.

The unified platform, combining FaceMe’s real-time facial recognition to the AXIS Camera Station interface, delivers a unique, efficient and powerful monitoring solution. One operator can visualize up to 36 camera feeds on one screen. They can then rely on the facial recognition console running on a second display to receive real-time alerts. These alerts are triggered when individuals associated to a managed group (e.g., VIP, blocklists, employees) appear in front of a connected camera located in an area or at a time potentially requiring a certain action to be taken.

“Smart video management software is becoming an essential component to security and access control systems,” said Dr. Jau Huang, CEO of CyberLink. “Adding the facial recognition capabilities of FaceMe to the AXIS Camera Station enables a powerful, highly automated security monitoring environment, running on one intuitive platform.”

For an introduction to the FaceMe®-AXIS integration’s new features, visit the FaceMe® Security website or watch the introduction video.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About CyberLink
Founded in 1996, CyberLink Corp. (5203.TW) is the world leader in multimedia software and AI facial recognition technology. CyberLink addresses the demands of consumer, commercial and education markets through a wide range of solutions, covering digital content creation, multimedia playback, video conferencing, live casting, mobile applications and AI facial recognition.  CyberLink has shipped several hundred million copies of its multimedia software and apps, including the award-winning PowerDirector, PhotoDirector, and PowerDVD.  With years of research in the fields of artificial intelligence and facial recognition, CyberLink has developed the FaceMe® Facial Recognition Engine. Powered by deep learning algorithms, FaceMe® delivers the reliable, high-precision, and real-time facial recognition that is critical to AIoT applications such as smart retail, smart security, and surveillance, smart city and smart home. For more information about CyberLink, please visit the official website at www.cyberlink.com

The algorithms that suggest your kids’ content

When considering mental health issues linked to online behavior, our thoughts may turn to cyberbullying, but there is another concern far more formidable than we might realize — access. Search engines have given us easy access to more and seemingly ever-fresh sources of content that have the potential to be just as detrimental, if not more so, than cyberbullying. Of course, search engines, along with personal computers, the internet, and the World Wide Web, are not inherently bad, but there is reason to be cautious. While we have seen great leaps in their development and functionalities, have we as technology users understood the accompanying risks?

Paradoxically, while one of the greatest areas of progress in computing relates to search engine algorithms, some of the most concerning issues are rooted in them. With greater use of search engines, their design evolved largely around deep learning, location and more data processing power. This combination has made them more powerful, making it easier for users to find the content they request. However, it has also increased the opportunity for unwanted or harmful content to appear or be requested and potentially disturb the user.

Early search engines
The first web search engines were built in the 1990s, after Tim Berners-Lee’s successful proposal for the World Wide Web. Most of their key development was done in the ’90s; however, modern search engines, such as Google, are now self-optimized, with algorithms tuned in real time and daily improvements to the user experience to suit the “modern” user.

Before Google Search became the preferred search engine, there was another giant, Yahoo! Search. Founded in 1994, Yahoo! was one of the pioneers of the web, offering a hierarchical directory of websites organized by category — Yahoo! Directory. At first Yahoo! Search could only search this directory; later, it started using its own web crawler to search the web and, later, served up results from other search engines, like Google and Bing. One of the reasons that Yahoo stumbled was that it prioritized old, trusted websites rather than new and more relevant ones. In contrast, Google brought fresh content to its users, making it increasingly popular.

Over time search engines have become even more sophisticated and elaborate and have gone mobile. Users, many of them children, have the entire web at their disposal at all times. This also means that the potential to access or receive inappropriate or harmful content is very high. The internet is an expansive place that gives various groups and communities the opportunity to meet and scale their influence for good and bad.

Not your neighborhood library
One thing may lead to another, and a child, minor or even an adult might stumble upon, attract or deliberately view content that might be harmful to them. This is an issue that has been present ever since the creation of the first search engines. As a growing problem, risky content is readily available on social media, online forums, websites and ads.

Back to the evolution of the search engine. To better serve users, search engines and social media alike started using predictive search and monetizing it; as such, the algorithms leveraged by search engines began to not only locate content, but also to suggest it. Large social platforms and search companies employ these developments to drive profit via ads (for example), but also to “feed” users content that has the potential to (artificially) broaden their interests. In this manner, search behavior informs the users’ “for you” or “suggested” pages. This can be particularly problematic for children and young adults, whose interests and personalities may not have fully formed. This pattern also opens up children and their interests for immediate and future monetization.

When “search” gets personal
Parents and educators need to be aware of the dangers awaiting minors online and be educated enough to help them. To highlight how direct a correlation there is between behavior-based search and the provided results, let’s consider how easily a “What I eat in a day” video may land you on a pro-ana (pro-anorexia) online forum, a thinspiration (thin inspiration) message board, or even a thread full of self-harm tips or other explicit content.

The social issues and the technology have evolved to a point where stopping them is a difficult task. Algorithms work tirelessly to bring users content they calculate they might enjoy and interact with. Therefore, we have to do everything in our power to protect children, minors and ourselves.

This issue has now captured the attention of not only popular media, but also some governments who recognize the danger this brings. The story of Molly Russell was one of the first to bring the issue to the light of the day and get people talking. Even though large social media platforms endeavor to protect their users, efforts certainly lag behind rapid development in business and technology.

Some states have taken it upon themselves to protect the most vulnerable. In early March 2022, lawmakers in the US state of Minnesota set out to pass a law prohibiting social media platforms from using algorithms to suggest content to anyone below 18 years of age. However, this initiative has met opposition. Tech industry lobbyists claim passing the bill would violate the First Amendment, preventing companies from recommending useful content to users, and would require the companies to collect more data on their users. Another argument in opposition is that the law, however well intended, would undermine parental choice and restrict access to useful technologies.

A toolbox of prevention
It is natural that kids want to spend time on the internet, but they should not be wholly unsupervised. A great tool to help you keep tabs on your child´s behavior online is Parental Control. In addition to providing limits on how long your child can access certain apps and websites, it can also block specific content types and URLs for PCs and mobile devices alike.

One of the best features of ESET Parental Control, found in ESET Smart Security Premium, is Web Guard. Since websites can be categorized according to keywords, Web Guard blocks categories it deems inappropriate for your child’s age group. Of course, adult sites featuring pornography and gambling are blocked for all age groups. For Android devices, there is even a Safe Search feature that filters search engine results so that you do not have to worry that search engines suggest inappropriate content your child is not ready to view. You can also manually blacklist websites and apps you deem inappropriate for your child. The same applies to whitelisting appropriate resources.

Whether you start using Parental Control, an even more important task remains: educating yourself about the content that is on the web and having regular conversations with your children about the online and offline world. Talking to your children is one of the best tools you can give them to protect themselves. Education on any subject should start in the family, and that is especially true for personal and private topics and our online presence.

Children and minors deserve to be treated with respect and educated about the choices we make about or for them. Talking to them about their online behavior may make them feel like we are invading their privacy, so be sensitive and make sure they feel heard and understood.

To learn more about safety online for children, visit saferkidsonline.eset.com.

 

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

Do you know these IP Scanners?

Close your eyes. Imagine that, instead of being a good person reading this article at home, you are a newbie network administrator who must manage the IP addresses of thousands of devices networked on the extensive networks of a large company. 

At first you use your spreadsheet…, but it’s not enough! 

The tension increases and the temptation to jump out the window of the office may be too much sometimes, but thanks to the Blessed Sacrament, this text comes to mind (and to Google) where Pandora FMS blog tells you about…

Best IP Scanners, IP Scanner Tools

Listen to us, as so many times you did before. The IP Scanner or IP scanner tools are the way to save you an unattainable job on the fast track. 
So let yourself be carried away by the scroll of your trusted mouse, read carefully and select the option that best suits you.

Advanced IP Scanner

At the controls of this ipscan we find Famatech, a world leader in software development for remote control and network management. 

In case you have any doubts, this company has already been endorsed by millions of IT professionals around the world.

Almost all of us use Famatech’s award-winning software products.

In the distant 2002, they launched Advanced IP Scanner (which continues to be developed and improved every day) and this tool proves to be of the most integral and effective to manage LAN networks and carry out all kinds of network tasks. 

One of the unquestionable strongpoints of Advanced IP Scanner is that Famatech takes user recommendations on the improvement of the product seriously and gets down to work quickly.

In addition, Advanced IP Scanner integrates with Radmin, another one of the most popular Famatech products to create remote technical support.

This technological Megazord expands the capacities of the IP Scanner and can simplify your work as system administrator.
IBM, Sony, Nokia, HP, Siemens and Samsung, have already joined in, surely you can’t be left behind!

Free IP Scanner

Perhaps the fastest in the wild-west scanning IP ranges, in addition to ports geared primarily for administrators and users who want to monitor their networks.

Free IP Scanner has the unique ability to scan a hundred computers per second, and it does so with ease due to its recursive process technology that greatly increases scanning speed.

It even gives you the possibility to find out the busy IP addresses within the same network and shows you the NetBIOS data of each machine. 

These data, from the name to the group, including the MAC address, can be exported to a plain text file.

With Free IP Scanner you may also define scanning by IP address range, simultaneous maximum processes or ports.

All of this for free.  

IP Range Scanner

Lansweeper offers us this tool for free. How much we like free stuff, huh? 

If Stone City had an ad that read “Free stones”, we would be able to take a car full of stones home. 

We’d do something with them!  

IP Range Scanner is able to scan your network and provide all that information you are looking forward to knowing about devices connected to your network.

You may also schedule a network scan and run it when prompted.

#IPRangeScannerYourNewButler

OpUtils

Some consider “OpUtils” to be a supervillain’s name. However, nothing further from the truth. 

It’s a super software for IP address management and switching port that rescues IT administrators from trees and helps them manage switches and IP address space with ease. 
In its belt we find more than 30 network tools, which help us perform network monitoring tasks. Including:

  • The super intrusion detector of fraudulent devices.
  • The bandwidth usage supercontroller.
  • Supervisor of the availability of critical devices.
  • The Cisco Configuration File Backup Superrunner.

Network Scanner

Network Scanner, almost the panacea

The IP Scanner they use to scan both large corporate networks with thousands of devices and small businesses with a few computers.

The number of computers and subnets is unlimited.

And it can scan a list of IP addresses, computers, and IP address ranges and show you all the resources shared.

Including: 

  • System shared resources. 
  • NetBIOS Hidden (Samba) 
  • FTP and web resources.

Ideal for auditing network computers or using it to search for available network resources.

Both network administrators and regular users can use Network Scanner.
And Network Scanner will not only find network computers and shares, it will also check their access rights so that the user can build them as a network drive or open them in their browser.

Conclusions

Here are just a few examples of the top of the best IP Scanners on the market. We know you’ll have a hard time deciding. 

It’s like when they put a tray of assorted sushi in front of you. 

There’s no way to decree which one’s best while you’re still salivating. 

Anyway, let’s name a couple more options for you to burst into uncertainty. We’re that good!

  • IP Address Manager
  • PRTG Network Monitor
  • Angry IP Scanner
  • IP Scanner by Spiceworks
  • NMAP

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About PandoraFMS
Pandora FMS is a flexible monitoring system, capable of monitoring devices, infrastructures, applications, services and business processes.
Of course, one of the things that Pandora FMS can control is the hard disks of your computers.

Microsoft Attack: How PAM enables you to reduce cyberattack risks

Each day more news of cyber attacks come up in the media, involving from Small and Medium Enterprises (SMEs) to large business conglomerates. These attacks can have several motivations: they can only serve as alerts for organizations to increase their cybersecurity maturity; steal the data to resell it on the Deep Web; cause harm to the organization; or carry out extortion. This is in addition to the operational and image losses that organizations can suffer, which can be incalculable. It is important to emphasize that cybersecurity risks are increasingly associated with business risks, and must be considered by senior management when defining their business strategies. 

The Lapsus$ cyber gang has been doing quite a bit of damage these past few days. Okta and Microsoft are among the targets of successful attacks by DEV-0537, as the gang is called by the developer of Windows. Do you want to understand how the attacks on Microsoft and Okta occurred, and how the attacks could be prevented or minimized? Read this article until the end and we will explain.

Lapsus$ started its activities targeting organizations in the UK and South America. The cyber gang then expanded its actions to global targets, including government, technology, telecom, media, retail and healthcare. In both Microsoft and Okta cases, the malicious attackers used privileged credentials to carry out their attacks. According to the Verizon 2021 Data Breach Investigations Report, 61% of cyberattacks involved privileged credentials. But why are high-privilege credentials among cybercriminals’ favorite targets?

 Well, the main reason for the high rate of attacks through privileged credentials is because they allow the execution of a series of administrative activities in the environment. Transferring resources in an ERP system or changing the settings of a firewall or email server are some of the activities that can be performed using this type of credential. It’s no wonder they’re also called “keys to the kingdom”: privileged credentials give you unlimited access to your organization’s most critical devices, applications, and data.

 It is also worth remembering that Lapsus$ uses Social Engineering as a technique to gain access to privileged credentials, as well as in 35% of cyber attacks, according to the Verizon report. Techniques used by Lapsus$ include SIM Swapping, paying employees and third parties in exchange for their credentials or configured MFAs, or Social Engineering over the phone.

In the case of Okta, according to its CSO, the malicious attackers had access to a device of a Support engineer in a time window of six days, between January 16 and 21, 2022. Also according to the Okta executive, the cyber attack affected a low percentage of customers – approximately 2.5% or 400 customers.

Microsoft’s investigation of the incident found a compromised privileged account, which allowed access to their environment. However, the malicious attackers were not able to access personal data, such as customers, but they had access to the company’s source code, although Microsoft does not consider this fact serious.

To help organizations manage and protect their privileged credentials, there is Privileged Access Management, or PAM. According to Gartner, PAM solutions help organizations provide privileged access to critical assets and achieve compliance by managing and monitoring privileged accounts and access.

Also according to Gartner, it is impossible to manage privileged access risks without specific Privileged Access Management tools. But how can the senhasegura PAM security platform help prevent, detect and remediate cyberattacks such as those that occurred with Okta and Microsoft?

senhasegura offers an approach based on the privileged access lifecycle: from the actions performed before, during and after access.

Initially, senhasegura offers Credential Management features, which allow the user to view the password of a credential to access a device or application. senhasegura also allows you to configure criteria for password change, such as number of uses, specific date and time, or elapsed time.

 senhasegura also offers Remote Session Management functionality, which further increases security in relation to pure credential management. In this case, senhasegura records and stores all remote sessions carried out through the solution.

senhasegura’s Threat and Behavior Analysis allows the identification and response to any change in behavior patterns and user access profiles. In case of detection of suspicious access, the LiveStream functionality allows the Information Security team to monitor all actions performed by the user, being possible to block or interrupt the session in case of suspicious behavior.

 All actions performed by users through remote sessions on senhasegura are logged. In this case, the Security team is able to search for specific commands performed by the user, allowing them to easily find potentially malicious ones.

 Finally, senhasegura offers senhasegura Domum, which provides secure remote access for employees and third parties, providing Zero Trust-based access without the need for additional configuration, such as VPN, or access to the PAM solution. All of this with all the security features already offered by the PAM platform.

 We have seen that when it comes to cybersecurity, the question is not “if” the attack will occur, but when. Many of these cyberattacks involve privileged credentials, also called “keys to the kingdom”. According to Gartner, it is impossible to manage the risks associated with privileged access without specific tools. senhasegura offers a complete PAM platform, which covers the entire privileged access lifecycle. In this way, it is possible to quickly detect potentially malicious actions, thus allowing the reduction of operational costs in addition to compliance with regulatory requirements and security policies.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Segura®
Segura® strive to ensure the sovereignty of companies over actions and privileged information. To this end, we work against data theft through traceability of administrator actions on networks, servers, databases and a multitude of devices. In addition, we pursue compliance with auditing requirements and the most demanding standards, including PCI DSS, Sarbanes-Oxley, ISO 27001 and HIPAA.