Source：IT Pro

Enterprises continuously face cybersecurity incidents, reflecting the inadequacy of existing protective mechanisms. IT infrastructure solution provider Microware has adopted Sangfor's threat monitoring and proactive response service to create a 24/7 managed security service. This service precisely detects security threats across networks of enterprises of all sizes, proactively plugs vulnerabilities, and provides long-term security planning and improvement recommendations.

Sangfor’s Huge Security Product Line

Microware was established in Hong Kong 36 years ago. In recent years, it has expanded its security business, not only increasing its manpower but also introducing Sangfor security products and providing thoughtful managed security services. Microware System Division Senior Consultant, Mr. Godfrey Ma, stated that since the company went public in 2017, it has placed a strong emphasis on network security solutions and provided thoughtful security managed services to address the shortage of security talents in enterprises. Among the many security solution providers, why did Microware choose Sangfor? He pointed out: "Most security providers in the market only specialize in a specific area of network security. Sangfor, as one of the top 10 global security providers, business covers network equipment, management software, virtualization technology, security gateways, and cloud services. Sangfor also extensively applies artificial intelligence (AI) technology, which continuously strengthens its security products and services, and can address various security threats and automated attacks."

● Sangfor Technology Hong Kong Product Director Mr. Simon Tsang (left) and Microware System Division Senior Consultant Mr. Godfrey Ma (right) have partnered to combine Sangfor security products with Microware's expert team to build a 24/7 managed security service.

Three Key Network Security Strategies

Sangfor Technology Hong Kong Product Director Simin Tsang stated that managed security service business requires teamwork, leading network security and detection technology, as well as the determination to solve customers' problems together. He said: "Microware is determined to establish a network security team and apply Sangfor's new CyberCommand (NTA+UEBA) product to its managed security services, to predict security risks, handle security incidents, provide process guidance, and continuously and effectively analyze the latent internal attacks on the network, which perfectly meets the needs of enterprises today." He explained that traditional network security solutions rely mainly on firewall-based perimeter defense technology, which has become ineffective and outdated, unable to cope with the new network attacks. Sangfor believes that a comprehensive network security approach should be based on three key security strategies:

1.Continuous Risk Assessment: Treat the root cause and prevent it in advance before security incidents occur. Risk assessment can be considered based on the importance of the business assets being carried, the frequency of threats occurring, and the vulnerabilities of the assets themselves, and a comprehensive assessment of the likelihood and impact of security incidents.

2.Multilayered Protection: Defend, detect, and respond at various levels such as cloud, network, endpoint, and security services. The various security mechanisms complement each other, collaborative defense, and can achieve risk control and enhanced protection for overall and structural weaknesses.

3.Proactive Defense: Combine threat intelligence to continuously monitor security and forecast risks, provide proactive defense and precise early warning, and build a real-time elastic defense system.

To implement the above three strategies, artificial intelligence needs to be incorporated into various network security tools, which is Sangfor's intelligent security architecture. This architecture can assess the actual risks faced by the organization, and based on the severity of the risks, provide comprehensive protection through security defense technologies covering the cloud, network, and endpoint layers. At the same time, it establishes a security management system to better assist enterprises in implementing security capabilities.

Threat Monitoring and Proactive Response Service

Under the Sangfor Intelligent Security Architecture, the Managed Detection and Response Service can perfectly address the challenges faced by enterprises, such as the constantly escalating external threats, the inability to identify potential risks promptly, and the shortage of security talent. Simon Tsang emphasized that this service is Sangfor's unique "human-machine collaborative intelligence" model, which comprehensively utilizes the experience of senior security experts and the rich threat intelligence knowledge base, performs correlation analysis on the security logs and traffic of different security devices, and helps users accurately detect security threats in the network through the positioning of security threats by senior experts.

At the same time, the Sangfor expert team will proactively respond to the identified threats, take measures to reduce the potential impact, assist users in handling security incidents, and provide long-term security planning and improvement suggestions through the analysis of security threat trends.

Gold-Level Partner's First-Hand Experience

Godfrey revealed that Microware is a Gold-level partner of Sangfor, and also a user of security services. One year ago, they adopted Sangfor's Threat Monitoring and Proactive Response Service to protect the network security of their over 300-person company, and the detection efficiency and response speed were excellent.

He pointed out that in the past, managed security services were only affordable for large enterprises. Therefore, they hope to collaborate with Sangfor to provide customized managed security service packages for SMEs with 20 to 300 employees, and the details can be adjusted flexibly according to their business development.

Microware has full confidence in Sangfor's Threat Monitoring and Proactive Response Service, so they have included this service in their managed security service offerings and recommended it to their clients, bringing professional-level security protection to them.

He said: "Sangfor's Threat Monitoring and Proactive Response Service collects and encrypts information, and uses Sangfor's self-developed security operations platform, equipped with built-in AI algorithms and security use cases, to analyze security logs and hunt for hidden threats." When a security incident is detected, the security operations platform will automatically notify the security operations team in real time to initiate the standardized process of incident analysis and response. Throughout the process, Microware's expert team provides strong technical support, as well as visualization tools to keep the clients fully informed of the service progress.

Therefore, with the combination of Sangfor's real-time AI technology and Microware's robust security service team, SMEs can access affordable service packages to defend against various security threats.

A Service Team Dedicated to Cybersecurity

In response to the ever-increasing demand for security in recent years, Microware quickly adapted to the market changes by establishing a dedicated Network & Security Service Team as early as 2019.

One of the key strengths of this team is that the professional staff first conducts a comprehensive network security assessment for the clients, then proceeds to plan and provide complete solution support. This helps expand the company's expertise in this domain.

The team is dedicated to offering full-fledged pre-sales and post-sales services to enterprise clients. Each team member has at least 10-20 years of experience in network and security management, with professional knowledge and extensive hands-on experience to tailor solutions for clients.

The technical specialists provide 24x7 system and network management and monitoring services for the users, delivering timely SLA (Service Level Agreement) support to address their issues and concerns.

● The Microware Managed Security Services Team is available to assist enterprises on-site with setting up network security devices and planning comprehensive security protection.

The team is also continually equipping itself. In addition to enhancing their technical and professional capabilities, they also place great emphasis on maintaining close communication with suppliers and sharing knowledge with clients.

The team understands that it is not only important for IT personnel to upskill themselves but also for enterprise users to possess a certain level of network knowledge. With the collaboration of both parties, the overall defense against network attacks for enterprise clients can be comprehensively strengthened.

Microware Managed Security Services

Security Experts and Technical Team

Security Operations Services

Threat Monitoring and Proactive Response

Security Log Analysis and Incident Response

Continuous Risk Assessment

In Conclusion: Ensuring Security Enables Comprehensive Business Development

The Microware Managed Security Services team currently has over 10 members and is continuously expanding. With strong technical support from Sangfor, the team can provide customized security management services according to client requirements.

Summarizing the importance of security, Godfrey Ma states: "Today, IT capabilities are equivalent to business capabilities. If the network falls victim to hacker attacks, the consequences can be severe. By adopting Microware's Managed Security Services, our expert team will monitor and safeguard your network security around the clock. This allows you to focus wholeheartedly on business development and digital transformation without any worries."