Security & Updates | Support Revolution Ltd

Secure Your Systems With Proactive Updates

Even the most robust security setup needs a process for updating when new vulnerabilities or exploits are identified. That’s why Support Revolution deploys the Intrusion Prevention System of Trend Micro Deep Security for the majority of customers.

Step 1:
New rules are published regularly by Trend Micro.
Step 2:
Rules are downloaded to the management console along with an associated threat level, and the manager alerts with recommendations as to which rules apply.
Step 3:
The customer chooses which rules to deploy, when and in what mode.
There is even an option to apply updates automatically, with no human intervention.

Note:

Because Deep Security is separate from a customer’s ERP system, applying new rules does not impact functionality. New rules are typically released in detect-only mode to ensure no issues are caused on customer systems, except for zero days

The benefits of virtual patching

Speed

Virtual patching ensures you’re protected against new threats and vulnerabilities within minutes instead of weeks or months.

Protects older, unsupported ERP systems

Virtual patching does not require upgrading your ERP or remaining in the vendor’s support programme, making it highly cost-effective.

Ease of deployment

Rules are applied without downtime, enabling protection to be applied without waiting for scheduled maintenance windows.

Flexibility

New rules can be applied in Protection Mode (which blocks malicious traffic) or Detection Mode (which reports malicious traffic), giving you increased control.

Compliance

Support Revolution’s virtual patching approach helps you meet the requirements of essential compliance standards like GDPR, PCI-DSS and HIPAA.

Why is speed so important? (a cautionary tale)

When a new vulnerability is discovered, the race is on to patch it before a hacker can exploit it. This race becomes even more critical when vulnerabilities are included in readily available exploit kits.

This real-life example shows just how essential fast patching is…

On 17 April 2019, a new vulnerability (CVE-2019-2725) was identified in Oracle WebLogic. Oracle made an out-of-timeline patch available on 26 April when full details were made available, and Trend Micro released a new rule for Deep Security on the same day. So all good then, right? Not quite.

As soon as a vulnerability is announced, hackers start exploiting it. In this case, exploits (including exploit kits) occurred within a few days of making the Oracle patch available. However, it takes weeks or months for an ERP customer to test and apply a new patch. So, while a patch was available, many Oracle customers were still vulnerable during this critical period.

On the other hand, Deep Security rules can be applied within minutes of release, so all Support Revolution customers were fully protected before any hacker could attack their systems.

Secure your systems by speaking to our security experts

Book a Meeting to Discuss Your Requirements