A Fortify 24x7 brand. Security engineering for the companies that build things.Client sign inTalk to an engineer
EagleTech Innovations
Sheet 07 / Fleet management

An unpatched machine is an unlocked door with a sign on it.

Most of what gets used against a small company is not novel. It is a known flaw in a browser, a hypervisor tool, or a PDF reader, with a patch that shipped weeks ago and never landed because nobody owns the job. Fleet management is the unglamorous half of this and it prevents more incidents than anything else we sell.

N-able N-sightAddigy on the MacsZimperium on handsets
4 lines / windows, apple, mobile / one desk
Lines on this sheet4
PlatformsN-sight, then Addigy and Zimperium
Rate basisManaged device
CoversWindows, Apple, mobile

Someone has to own the boring job

Patching is a scheduling problem with consequences. Somebody must know which machines are out there, which skipped the previous cycle, which reboot got deferred four times by a person in the middle of a render, and which piece of software is quietly two major versions behind. On a team of twenty five that job goes to whoever is least busy, which means it goes nowhere.

N-sight gives us the inventory, the patch state, scripting, and remote support on one agent. The web and DNS filtering line rides the same agent, so blocking the domains behind a campaign does not require a new appliance, a new console, or a change to anybody's network.

On a team of twenty five, patching goes to whoever is least busy, which means it goes nowhere.

Mac shops and the phones nobody manages

Design and engineering teams tend to run on Apple hardware, and Apple hardware is often the least managed part of the estate because it works. Addigy handles enrolment, configuration, patching, and policy for Macs without turning them into machines your designers resent.

Phones are the honest gap in most small companies. They hold the mail, the chat, the authenticator, and increasingly the approvals, and typically nothing is watching them at all. Zimperium runs on the device itself and detects threats without shipping your staff's personal browsing to anybody.

Lines on this sheet

Specifications and rates

Prices below are pulled straight out of billing. Anything you add sits in your basket while you carry on reading.

Fortify-RMMSpecification

Remote Monitoring and Management

One agent doing the unglamorous jobs, from N-able N-sight

The agent that gives your fleet an owner. Inventory, health monitoring, patch deployment, scripted remediation, and remote hands when somebody is stuck.

  • Inventory and health monitoring across the machines you enroll.
  • Operating system and third party patching on a schedule that suits your team.
  • Scripted fixes and remote support sessions worked by the Fortify 24x7 desk.
PlatformN-able N-sight
CoverageWindows and supported server operating systems
FunctionsMonitoring, patching, scripting, remote support
ReportingPatch state and device health, on request or scheduled
DeskFortify 24x7 operations engineers
Rate basisManaged device, monthly
Fetchingper managed device
billed monthly, up front
QTY
Fortify-RMM-DNSSpecification

Web and DNS Filtering

Resolving names against policy, from N-able N-sight

Filtering on the same agent, so a machine is protected on the office network, at home, and on hotel wifi without anything being routed through a box you have to own.

  • Blocks the domains behind phishing and malware campaigns at resolution.
  • Category policy you set, with exceptions we manage rather than argue about.
  • Travels with the laptop, because it is on the device and not on the network.
PlatformN-able N-sight
EnforcementDNS resolution and web category policy
LocationOn the device, so it follows the machine anywhere
HardwareNone. No appliance and no network change
RequiresThe monitoring and management line on the same device
Rate basisManaged device, monthly
Fetchingper managed device
billed monthly, up front
QTY
Fortify-ControlSpecification

Apple Fleet Management

Addigy, running the Apple estate properly

Proper management for the Macs your design and engineering teams work on, covering enrolment, configuration, patching, and policy.

  • Enrolment and configuration profiles applied without a manual afternoon.
  • macOS and application updates tracked and deployed on a cadence you choose.
  • Policy and inventory for Apple hardware, alongside the rest of your fleet.
PlatformAddigy
CoveragemacOS, with support for Apple device enrolment
FunctionsEnrolment, configuration, patching, policy, inventory
Best fitDesign and engineering teams working on Apple hardware
Rate basisApple device, monthly
Fetchingper Apple device
billed monthly, up front
QTY
Fortify-MobileSpecification

Mobile Threat Defense

Zimperium, detecting on the handset itself

Detection that runs on the phone itself, covering the device, the network it joins, the applications on it, and the phishing that arrives outside email.

  • On device detection, so analysis does not depend on shipping traffic elsewhere.
  • Covers malicious applications, hostile networks, and device level compromise.
  • Catches phishing that arrives by message and chat rather than by mail.
PlatformZimperium
CoverageiOS and Android
DetectionDevice, network, application, and phishing vectors
PrivacyAnalysis runs on the handset rather than in a traffic pipeline
Rate basisMobile device, monthly
Fetchingper mobile device
billed monthly, up front
QTY
Honest scope

Where this sheet stops

Management lines are the easiest place for a provider to imply more than is true. These are the edges.

  • Patching waits on vendors publishing fixes. Where no fix exists yet, nobody on earth can patch it. Often we can blunt the risk with policy or filtering meanwhile, and we will say clearly when that is what we are doing.
  • Filtering is not a firewall. DNS and category policy stops a large share of ordinary campaigns. It is not network segmentation, and it will not save a machine from something already running on it.
  • Mobile coverage needs the application installed. A phone without the agent is not protected. On personally owned handsets that is a conversation with your team, not a setting we can flip.
  • Keeping machines tidy is not the same as watching them. These lines hold hardware current and reachable. Spotting an intrusion underway belongs to the detection sheet, and the pair are designed to be bought alongside each other.
  • Reboots still need humans sometimes. Some updates only complete on restart. We schedule and remind, but a person who defers for three weeks will remain unpatched for three weeks.
NOTE 01

Heads up: card statements show FORTIFY 24X7 - EagleTech Innovations is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.