Ringfencing

☂️ Meets cyber security insurance requirement

What is it?

Ringfencing controls what applications are able to do once they are running. By limiting what software can do, Ringfencing can reduce the likelihood of an exploit being successful or an attacker weaponizing legitimate tools such as PowerShell or Microsoft Office.

RingfencingTM allows you to control how applications can interact with other applications. For example, while both Microsoft Word and PowerShell may be permitted, Ringfencing will prevent Microsoft Word from being able to call PowerShell, thus preventing an attempted exploit of a vulnerability such as the Follina vulnerability from being successful.

Why it's important?

Under normal operations, all applications permitted on an endpoint have the same access as the operating user: data, applications, the network, and the registry. If compromised, an attacker can use the application to steal or encrypt files, abuse legitimate tools, communicate with malicious IPs, and make changes to the registry. Ringfencing allows you to create boundaries to permit applications access to only what they need.

How it works:

Puma implements a plan to deploy and install Ringfencing across your organization’s endpoints. Once installed, these endpoints will automatically be configured to apply a policy to a list of known applications such as Microsoft Office, PowerShell, Teams, and many more typical applications. The default policies aim to provide a baseline level of protection for all endpoints. Puma then updates your policies, creating and changing to fit your organization’s needs without compromising security.