Endpoint Management
Laptops, phones, tablets, and printers managed from one console.
Managed EDR services for the devices we manage
EDR records what runs on each device, flags behavior that looks like an attack, and can isolate an infected machine. We run it for mid-market companies on the devices we manage, and our team responds to the alerts it raises. It works alongside the rest of our stack: managed firewalls at the network edge, patching to close holes, and Veeam restores with our backup service.
At a glance
| Protects | Devices we manage |
|---|---|
| Containment | Can isolate an infected device from the network |
| Alerts | Handled by our team |
| Pairs with | Backup & Disaster Recovery (Veeam) |
| Recovery | 60-minute recovery (with our backup service) |
Outcomes
What you get
Stop the spread at one device
EDR can isolate a compromised device from the rest of the network, cutting its path to your file servers and other machines.
A record of what happened
EDR keeps a timeline of what ran on each device, when and from where. After an incident, that record helps explain how it started and what it touched.
Layers that cover each other
Your firewall works at the network edge. EDR watches each device for what got past it, or arrived another way, like a USB stick or a phishing attachment.
Process
How it works
Step 1: Install
We deploy the EDR agent to the devices we manage, so each one is covered.
Step 2: Watch
EDR records process, file, and network activity on each device and can flag behavior that looks like an attack, such as mass file encryption or credential theft.
Step 3: Contain
A device showing attack behavior can be cut off from the network, so one infected machine stays one infected machine.
Step 4: Respond
Our team responds to the alerts. If files were damaged and you're on our backup service, we restore them from Veeam.
Related
Services that work with this one
Pairs well with
Patch Management
OS and third-party patches tested, scheduled, and reported on.
Backup & Disaster Recovery
Veeam backups with 60-minute recovery and up to 7 years of restore points.
FAQ
Frequently asked questions
What's the difference between EDR and MDR?
EDR (endpoint detection and response) is the software on each device. It watches activity, flags likely attacks, and can isolate a machine. MDR (managed detection and response) is a service built around a team that watches those alerts. With us, EDR is managed: our team deploys it and responds to the alerts it raises. We offer both. MDR adds 24/7 SOC monitoring and incident response.
How is EDR different from antivirus?
Antivirus checks files against a list of known malware. EDR watches behavior. A program encrypting files in bulk, or a script pulling saved passwords, can get flagged even if nobody has seen that exact malware before. Attackers change their malware constantly to slip past those lists.
We already pay for endpoint management. Do we need EDR too?
They do different jobs. Endpoint management keeps devices set up, updated, and inventoried: laptops, phones, tablets, and printers from one console. EDR watches each device for attack behavior. We run both on the devices we manage.
What happens if ransomware gets through anyway?
EDR can isolate the infected device, and with our Backup & Disaster Recovery service we can restore encrypted files from Veeam.
Can you run EDR alongside our internal IT team?
Yes, your team keeps day-to-day control of its devices and we run the EDR alongside it.
Last updated
Talk to our team about Endpoint Detection & Response
Tell us what you run today and what you want fixed.
We reply within one business day.
- Sales
- (214) 447-0244
- Support
- (972) 591-0151
- sales@sanapptx.com
- HQ
- 5700 Tennyson Parkway
Plano, TX 75024