An MSSP, MSP Guide to RSA 2024

The opening of the annual RSA Conference in San Francisco on Monday brought together MSSPs, MSPs, vendors and subject matter experts for a three-day event featuring new products, services and ideas representing the latest innovations and thought leadership from across the cybersecurity industry.

This year’s event is a beacon for MSSPs and MSPs to connect with industry peers and learn about the latest cyber threats and the products that could help lessen their destructive impacts. RSA is undoubtedly one of the world’s largest cybersecurity events, providing a forum to share the latest offerings to help service providers defend their customers' most sensitive information and IT systems.

While MSSP Alert can’t list all the vendors and announcements, here are some that we think will be highly interesting to our readers:

SonicWall is showcasing its new cybersecurity management platform. SonicPlatform gives MSPs and MSSPs additional tools and services to help protect their customers’ IT systems. The SonicPlatform is designed to unify SonicWall products into a single interface that focuses on streamlining management tasks while delivering deep product integration aimed at sharing contextual information for customers. SonicPlatform aims to provide unified management and oversight for cloud-based and on-premises infrastructure while adding other needed services including endpoint security, wireless access, cloud email security, and threat intelligence. The platform also offers security service edge (SSE), zero trust network access (ZTNA), managed security services, and managed detection and response (MDR) capabilities.

Absolute Security is demonstrating new features and upgrades to its Absolute Cyber Resilience Platform. The Absolute Compliance Module allows customers to integrate security policies into network access and endpoint security controls to only permit compliant and fully secured devices to connect to corporate networks, data and resources. In addition, Absolute is unveiling its Connector for Forescout eyeSight to incorporate comply-to-connect zero trust capabilities to further protect networks and data from unauthorized and non-compliant access. Absolute is adding Syxsense endpoint and vulnerability platform capabilities into the Absolute Persistence as a Service (APaaS) partner program, while also adding Absolute into the ConnectWise Invent partner program, making it easier for MSPs and MSSPs to extend Absolute cyber resilience capabilities to their security and compliance platforms.

Stellar Cyber is previewing its new generative AI-powered Open XDR Investigator offering, which aims to help companies streamline their threat-hunting processes and better protect the cybersecurity of their IT systems and operations. Stellar Cyber’s Open XDR Investigator is designed to increase the productivity and effectiveness of MSSP and enterprise security teams, giving them valuable new capabilities that can dramatically bolster their threat investigations and threat hunting. Open XDR investigator is built to allow security analysts to ask simple questions that can generate answers through the platform, instead of requiring them to perform such tasks using query commands or crafting complex playbooks. Open XDR is designed to allow security teams to gain more insights more quickly while using simple language requests rather than complex coding. In addition, Stellar Cyber is announcing that it has been Named Triple Winner of Global InfoSec Awards.

Cybersecurity vendor Lumu is unveiling its Lumu Autopilot technology to help MSPs deliver autonomous incident management to customers. Lumu Autopilot can act automatically using AI-powered decision making together with extensive information from networks and from integrated cybersecurity products that are also being used by companies for cyber protection. Incidents detected by Lumu Autopilot can be escalated to human analysts who can use the collected information on immediate action items, best practices and individual endpoints to take manual action, if needed.

Blumira is displaying several new cybersecurity offerings, including a 30-day trial version of its Blumira Extended Detection and Response (XDR) platform. The platform gives IT teams full access to evaluate the platform, including endpoint visibility and response, real-time actionable alerts and investigations. Blumira Investigate is a new capability that gives customers easy-to-use search capabilities, which shows all events related to security incidents and speeds up investigation and response efforts. Also new are expanded SAML single sign-on (SSO) options, allowing easier authentication of users via their preferred identity provider, including Duo Security, Okta, Google and Microsoft.

The Biden administration is rolling out a strategy at RSA for how to build global cybersecurity cooperation. The State Department’s international cybersecurity strategy is the first articulated U.S. global cyber strategy in over a decade. If successful, it could elevate the U.S.’s role globally in countering cyber threats and creating global consensus on artificial intelligence and position the U.S. against China in setting cybersecurity norms. (Source: Politico)