Most small firms do not have an inventory. There is a rough idea, a drawer of retired laptops, and a phone in a pocket somewhere carrying the same mail as the office. This forme is about knowing what the firm owns and keeping the lot up to date. Unglamorous, and it heads off more grief than anything else in the case.
A large share of what gets exploited at this size was fixed by the vendor months earlier. The update existed; nobody applied it. N-able N-sight schedules the operating system alongside the everyday third party software, stages a rollout so one bad release cannot land everywhere at once, and reports whatever refused to install so the stuck machine gets chased.
Filtering rides on that same agent. Names are refused before they resolve, which catches a mistyped domain and a link buried in a fake invoice at the same door, and it goes home in the laptop bag rather than living in your building waiting for everyone to come back.
Macs and iPads that arrived one at a time tend to be managed by nobody at all. Addigy takes enrolment, settings, updates and software delivery, which turns a pile of individually configured machines into a fleet you can say something true about.
A phone reads your mail, carries the codes that open everything else, and spends its day on networks nobody has ever inspected. Zimperium decides on the handset itself rather than routing traffic through anybody, which leaves staff privacy where it was and still catches a hostile network or a tampered device.
Figures underneath come straight from billing when this page opens. Whatever you set falls into the composing stick and sits there until you are done reading.
Machines that are patched, disks somebody is actually watching, and help that arrives without a visit. Most trouble in a small office gives notice first, provided somebody is around to read the notice.
| Set on | N-able N-sight |
|---|---|
| Prints | Patch state, hardware health, and a list of what you own |
| Standing type | A patch policy applied identically every cycle |
| Locked by | Fortify 24x7 engineers approving and staging each update |
| Proofed by | A monthly account of what patched and what refused |
The lookup is refused before any connection exists, which catches a mistyped domain and a link inside a forged invoice at one and the same door. It goes home in the laptop bag rather than living in your building.
| Set on | N-able N-sight |
|---|---|
| Prints | A refused lookup, and a note of what went asking |
| Standing type | A category list that stays as set until you move it |
| Locked by | Our engineers at Fortify 24x7, who handle the exceptions |
| Proofed by | Reporting on what got refused and how often |
Apple kit managed properly instead of being trusted to look after itself. Enrolment, settings, updates and software delivery all run from one place, by people who do this every week.
| Set on | Addigy |
|---|---|
| Prints | Enrolment, settings and update status for every device |
| Standing type | Settings that outlive a reboot and a fresh user account |
| Locked by | Fortify 24x7 engineers holding the management tenant |
| Proofed by | Compliance you can inspect yourself without asking us |
A phone reads your mail, holds the codes unlocking everything else, and spends its day on networks nobody vetted. This watches the device from the device, rather than asking a distant server to have a guess.
| Set on | Zimperium |
|---|---|
| Prints | A warning on the handset and a case waiting at the desk |
| Standing type | On device detection that keeps going off network |
| Locked by | Fortify 24x7 engineers sorting what the handset reports |
| Proofed by | Posture reporting across the handsets enrolled |
This forme is the housekeeping, and housekeeping has limits worth stating. Marked up here is the ground these four lines leave uncovered.
Heads up: card statements show FORTIFY 24X7 - SecureBiz IT is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.