ARX Shield: protection, hardening and containment

Protection is not just about installing an antivirus: it means knowing whether it works on every machine, whether systems are configured properly, which vulnerabilities are open, and being able to isolate a machine when needed. ARX Shield brings all of this into the ARXDOME portal.

How it works

Endpoint protection: the console of the antivirus/EDR solution is integrated into the portal, with machines, inventory, policies, threats, activities, packages, reports and licenses. Destructive actions require confirmation with an authenticator code, and every action is logged. For each machine you also see the status of the protection built into the operating system: health, definitions, scans, detections, machines that are not reporting.

Hardening: the configuration of every machine is assessed against the CIS benchmarks, with details of passed and failed checks and a dedicated report.

Vulnerabilities: open vulnerabilities by machine and by package, their age (since publication and since discovery), those already exploited by attackers, the day-by-day trend and disconnected machines with critical vulnerabilities.

Containment: isolating a machine safely

When a machine is suspicious, it can be isolated from the network with one click and released when it is safe to do so, with checks against premature releases. The person in front of the screen can be shown a message or a question, and you can open a conversation with them.

The perimeter is always in view: what the firewalls deny, where it comes from and on which services, and VPN login errors.