Not exactly software but I set up a whitelisting SRP policy awhile ago and its been fantastic and I get to feel really confident that our users cant easily screw things up. Its been 2 years now since our last infection. Pain in the butt with webex and gotomeeting and whatnot though. Since we now are going to Win 10 Enterprise Im going to set up Applocker since it’s a little easier to manage.
From: [email protected] [mailto:[email protected]] On Behalf Of Tom Miller Sent: Monday, June 12, 2017 7:35 AM To: [email protected] Subject: [NTSysADM] Ransonware protection Hi All, What would you recommend as specific software solutions to protect against Ransomware? In my company we use: - Sonicwall firewalls, and the gateway security component is enabled and is supposed to help block/prevent. - Symantec AV. Not specific to ransom-ware but appears to be reactive. I'm looking at additional layers of security, such as the Barracuda e-mail filter. I used that at past jobs and that reduced the "infected" e-mails considerably. I also have used Malwarebytes enterprise. That has an anti-ransomeware component. I used that in a past job and was not impressed. Malwarebytes sold is an an "enterprise" solution, but it was a stand alone product, had not integration with the management console, no configuration and no notifications. It appeared to be a rush to market. Sophos supposedly has a similar solution specific to Malwarebytes but I have not looked at it yet. Internally, we also have targeted employee training and use a service to send "fake" messages from Amazon/UPS, etc to let them know that they need to be vigilant when reviewing messages from outside the company. Thoughts appreciated. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ The information contained in this communication and all accompanying documents from Coilcraft may be confidential and/or legally privileged, and is intended only for the use of the recipient(s) named above. If you are not the intended recipient you are hereby notified that any review, disclosure, copying, distribution or the taking of any action in reliance on the contents of this transmitted information is strictly prohibited. If you have received this communication in error, please return it to the sender immediately and destroy the original message or accompanying materials and any copy thereof. If you have any questions concerning this message, please contact the sender.
