Kaseya Ransomware Protection

What Kaseya Ransomware Protection is

Kaseya Ransomware Protection uses VSA 10 to monitor endpoint files for behavioral signs of crypto-ransomware. When it detects file encryption, it can alert administrators, isolate the endpoint from network connections other than those needed to reach VSA 10, and attempt to terminate suspected malicious processes. Policies can monitor all local drives or selected drives and paths, set exclusions, and configure alert priority and responses, including an attempt to shut down an infected system. An isolated device can still contact VSA 10, so administrators can use VSA management features to triage and remediate it remotely. Kaseya says detection can work with its BCDR tools to restore an endpoint to a pre-attack state using backup snapshots. The ransomware monitor supports Windows 8.1 and later; network drives, removable drives, and USB mass-storage devices are outside its monitoring scope. Use requires an active VSA subscription, a Ransomware Detection license, an enabled policy, and a VSA 10 Agent on monitored endpoints able to communicate with the VSA instance. Pricing is by request and customized to customer needs.