{"id":60150,"date":"2021-01-31T11:07:00","date_gmt":"2021-01-31T17:07:00","guid":{"rendered":"https:\/\/www.pcmatic.com\/blog\/?p=60150"},"modified":"2022-01-26T11:44:40","modified_gmt":"2022-01-26T17:44:40","slug":"feature-expansion-endpoint-vulnerabilities","status":"publish","type":"post","link":"https:\/\/www.pcmatic.com\/blog\/feature-expansion-endpoint-vulnerabilities\/","title":{"rendered":"Feature Expansion – Endpoint Vulnerabilities"},"content":{"rendered":"\n

To expand your visibility over possible vulnerabilities in your environment, we have expanded PC Matic PRO<\/a>‘s Endpoint Vulnerabilities report to include two new reports: SuperShield Blacklist\/Learning Mode Enabled<\/em>, and Lockout Thresholds Not Set<\/em>.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

SuperShield Blacklist\/Learning Mode Enabled<\/h3>\n\n\n\n

When SuperShield is left in Blacklist Only or Learning Mode outside of a normal test or implementation phase, it leaves devices vulnerable to attack. All devices should be running in SuperShield Protection mode to remain secured by our whitelist based protection. The whitelisting applications<\/a> feature protects all devices from malware and ransomware threats.<\/p>\n\n\n\n

Any devices in Learning Mode or Blacklist Only mode will populate here with a quick toggle to switch them over to SuperShield Protection. It is normal to see devices here while implementing in Learning Mode, but that phase should end after a couple of days. Learning mode should be temporary and the whitelisting of applications<\/a> should be on to maintain optimal system security.<\/p>\n\n\n\n

Lockout Thresholds Not Set<\/h3>\n\n\n\n

PC Matic now automatically sets the Windows Account Lockout Threshold to further secure your devices from brute force attacks. This setting specifically stops frequent incorrect login attempts to a user account which users would normally log into to gain access to RDP. This includes other access points to the network. Our Secure Remote Desktop Access Control<\/a> software protects the network by carefully monitoring remote access points. An important feature is automatic alerting on any possible system intrusions.<\/p>\n\n\n\n

We automatically set this threshold for you. If any devices are not pulling that setting down, or it was reset, they will populate here. You can adjust the settings yourself, or apply our recommended defaults.<\/p>\n\n\n\n

PC Matic Strongly recommends at least using the recommended settings below to keep your devices secure from brute force attacks. In most cases, normal users will not fail their login 10 times during a 5-minute window. This means they will never see an inconvenience\u00a0from this security setting. <\/p>\n\n\n\n

You can, however, make this setting much stricter if you\u2019d like. Simply lock login attempts down even more by using something similar to the high-security settings below.<\/p>\n\n\n\n

PC Matic Recommended\/Default Settings<\/strong><\/p>\n\n\n\n