Our security vendor manages our endpoints. We passed our audit.
Ransomware enters through a compromised vendor portal and encrypts the electronic health records system. Doctors cannot access patient histories, medication lists, or allergy information. Surgeries are postponed. Emergency patients are diverted. The hospital pays $4.5M in ransom because lives are at stake. The backups were also encrypted because they were on the same network. Atlanta spent $17M recovering. Baltimore spent $18M.
Echoron Edge observes traffic crossing a Linux gateway you supply and flags a payload by signature and structure. Detected content is isolated and reported, and the hospital receives a report showing exactly what was flagged. Content inspection applies to unencrypted traffic. No product that sits on the network can read inside an encrypted session - ours included. Echoron Edge is coming soon - not yet purchasable.