Boasting a team of more than 600 colleagues, this MSP formed through the acquisition of several established firms and has been working with ConnectWise SIEM since 2016. Given their long-standing partnership with Perch (now ConnectWise SIEM) and an advanced in-house security team, it’s fair to say they are ‘dialed-in’ with a robust security offering, including a 24/7 SOC designed for comprehensive threat detection and response.

“We dabbled with building our own SIEM platform but realized that the best long-term play was to migrate all clients to ConnectWise SIEM to avoid supporting a custom-written platform. The transition was incredibly seamless.”

ConnectWise SIEM consolidates log data from all endpoints, networks, applications, and cloud services, including Microsoft 365. This consolidation breaks down data silos, providing a single-pane view of the entire IT environment. With advanced correlation and real-time alerting, ConnectWise SIEM enables security analysts to quickly identify, investigate, and address high-priority threats. The platform uses proprietary threat research and intelligence to enhance detection capabilities.

“We recently prevented a cyber incident with one of our clients, a regional orthopedics practice. The ConnectWise SIEM sounded the alarm, our advanced security stack prevented data exfiltration and ransomware from being deployed and we successfully thwarted an attempt by a malicious actor.”

The SIEM detected initial malicious activity, which was then thwarted by application whitelisting and further secured by enforcing a password change, effectively locking out the attackers.

“This layered security approach demonstrated the value of ConnectWise’s advanced security stack, emphasizing that while individual components are effective, their combined use provides a robust defense against cyber threats.”

ConnectWise SIEM Capabilities

By leveraging advanced technologies and a robust infrastructure, ConnectWise SIEM offers a range of capabilities that enhance threat detection, streamline incident response, and ensure regulatory compliance. Below are some of the key features that make it a powerful tool for any business, of any size:

• Data Consolidation and Visibility: ConnectWise SIEM consolidates log data from all endpoints, networks, applications, and cloud services, including Microsoft 365. This consolidation breaks down data silos, providing a single-pane view of the entire IT environment.
• Advanced Threat Detection: With advanced correlation and real-time alerting, ConnectWise SIEM enables security analysts to quickly identify, investigate, and address high-priority threats. The platform uses proprietary threat research and intelligence to enhance detection capabilities.
• Scalability and Flexibility: The SIEM solution is scalable and customizable to fit the needs of any business. It offers a multi-tenant architecture, making it particularly suitable for Managed Service Providers (MSPs). This architecture allows for efficient management of multiple client environments from a single platform.
• Integration and Automation: ConnectWise SIEM integrates with various applications and collects data via agents on end-user devices, servers, network equipment, firewalls, and antivirus software. It also supports protocols like syslog and API integrations for SaaS applications. This integration streamlines incident management and helps meet regulatory compliance requirements.
• 24/7 Managed Detection and Response: The SIEM solution is backed by an in-house Security Operations Center (SOC) that provides 24/7 monitoring, management, and triage of security incidents. This co-managed approach ensures that businesses have continuous protection without the need to build and maintain their own SOC.
• Forensic Analysis and Reporting: ConnectWise SIEM offers real-time attack detection and forensic analysis, helping businesses understand the full scope of security incidents. The platform provides detailed reports and dashboards, enabling quick decision-making and effective incident response.
• Cost Efficiency: By automating many security functions and providing a scalable solution, ConnectWise SIEM helps lower the total cost of ownership. It allows businesses to achieve high performance at lower operating costs, both now and in the future.

Security Dashboard: A Unified Security Approach

As the market has matured, ConnectWise has continued to innovate, developing a unified security stack that simplifies the management of security tools for Managed Service Providers (MSPs). This approach is exemplified by the new Security Dashboard, which aims to tie all tools under the ConnectWise umbrella into a unified security play.

“ConnectWise has always excelled at integrating disparate security tools into a cohesive platform. This unified approach is particularly beneficial for smaller MSPs that may not have the resources to research and integrate multiple security tools. By providing a comprehensive, cost-effective solution, it levels the playing field and ensures that even smaller businesses can benefit from advanced security measures.”

The ConnectWise Partner Program: Smooth Sailing Events

[Northeast-based MSP] recently hosted a successful dinner cruise event, funded by ConnectWise Partner Program Market Development Funds (MDF). The event aimed to engage clients and demonstrate the robust security solutions offered by ConnectWise, particularly focusing on ConnectWise SIEM and Security Operations Center (SOC) services.

Jim Peterson, Principal Solutions Advisor at ConnectWise, attended and co-presented at the event alongside a security analyst from the host company. The event provided an excellent platform to discuss the importance of cybersecurity, especially for municipalities, school districts, and police departments in the area.

“The ConnectWise Partner Program has been an invaluable support for us. Their resources, expert guidance, and commitment to championing events have been instrumental in showcasing our comprehensive security solutions.”

The SIEM and SOC services were highlighted for their ability to identify threats, piece together disparate information for quick decision-making, and provide comprehensive post-incident analysis.

“With ConnectWise’s SIEM and SOC services, we can effectively identify threats, make quick decisions, and provide comprehensive post-incident analysis, ensuring our clients’ cybersecurity needs are met.”