Ransomware/virus infection has been identified

Issue/Symptom/Question

We've identified a system attack and need to know how to seek help from Penta.

Applies To

Penta for Windows

System Security

Resolution/Fix/Answer

  • Immediately contact your Account Manager and notify them of the suspected attack
    • Provide as much detail as possible related to what may have been compromised.
  • Set up a service desk ticket with the pertinent information.

For Managed Services customers, Penta adheres to the following protocols related to network security:

  • Customers are isolated from one another by the use of separate AWS accounts.
  • Internet-facing systems, if any, are located in a DMZ.
  • Access from the DMZ to the Internal network is restricted to only the required network ports.
  • All Windows servers are equipped with Anti-Virus software.
  • The AWS environment is restricted to Penta Support, with MFA on the root account.
  • Access to the Remote Desktop servers is limited to either routing over a VPN tunnel or from specific source IP addresses on the Internet unless an RDS SSL Gateway is being used in which case the Remote Desktop servers are publicly accessible.
  • Access to the hosted environment is limited to Penta technical and support staff. Access to Administrator-type accounts is limited to key personnel only.
  • Operating system patches are installed on a routine basis.
  • Zabbix monitoring and performance tracking of all systems. 
    • Critical alerts are escalated to our on-call team member.