#CyberFit Score for machines

Findings:

• You have antimalware protection enabled (+275 points)
• You don’t have antimalware protection, your system may be at risk (0 points)

Recommendations provided by #CyberFit Score:

You should have an antimalware solution installed and enabled on your machine to stay protected from security risks.

You should refer to websites such as AV-Test or AV-Comparatives for a list of recommended antimalware solutions.

Findings:

• You have a backup solution protecting your data (+175 points)
• No backup solution was found, your data may be at risk (0 points)

Recommendations provided by #CyberFit Score:

You are recommended to back up your data regularly to prevent data loss or ransomware attacks. Below are some backup solutions that you should consider using:

• Acronis Cyber Protect / Cyber Backup / True Image
• Windows Server Backup (Windows Server 2008 R2 and later)

The agent checks whether a firewall is available and enabled in your environment.

The agent does the following:

1. Checks Windows Firewall and Network Protection whether a public firewall is turned on.

2. Checks Windows Firewall and Network Protection whether a private firewall is turned on.

3. Checks for a 3-rd party firewall solution/agent if Windows public and private firewalls are disabled.

Findings:

• You have a firewall enabled for public and private networks, or a 3-rd party firewall solution is found (+175 points)
• You have a firewall enabled only for public networks (+100 points)
• You have a firewall enabled only for private networks (+75 points)
• You have no firewall enabled, your network connection is not secure (0 points)

Recommendations provided by #CyberFit Score:

It is recommended to enable firewall for your public and private networks to improve your security protection against malicious attacks on your system. Below are provided detailed guides on setting-up your Windows firewall, depending on your security needs and network architecture:

Guides for end-users/employees:

How to set up Windows Defender Firewall on your PC

How to set up Windows Firewall on your PC

Guides for system administrators and engineers:

How to deploy Window Defender Firewall with Advanced Security

How to create Advanced Rules in Windows Firewall

Findings:

• You have a VPN solution and can safely receive and send data across public and shared networks (+75 points)
• No VPN solution was found, your connection to public and shared networks is not secure (0 points)

Recommendations provided by #CyberFit Score:

It is recommended to use VPN to access your corporate network and confidential data. It is critical to use a VPN to keep your communications safe and private, especially if you use complimentary Internet access from a cafe, library, airport, or elsewhere. Below are some VPN solutions that you should consider using:

• Acronis Business VPN
• OpenVPN
• Cisco AnyConnect
• NordVPN
• TunnelBear
• ExpressVPN
• PureVPN
• CyberGhost VPN
• Perimeter 81
• VyprVPN
• IPVanish VPN
• Hotspot Shield VPN
• Fortigate VPN
• ZYXEL VPN
• SonicWall GVPN
• LANCOM VPN

The agent checks whether a machine has disk encryption enabled.

The agent checks whether Windows BitLocker is turned on.

Findings:

• You have full disk encryption enabled, your machine is protected against physical tampering (+125 points)
• Only some hard drives are encrypted, your machine may be at risk from physical tampering (+75 points)
• No disk encryption was found, your machine is at risk from physical tampering (0 points)

Recommendations provided by #CyberFit Score:

It is recommended to turn on Windows BitLocker to improve protection of your data and files.

Guide: How to turn on device encryption on Windows

Findings:

• Outgoing NTLM traffic to remote servers is denied, your credentials are protected (+25 points)
• Outgoing NTLM traffic to remote servers is not denied, your credentials may be vulnerable to exposure (0 points)

Recommendations provided by #CyberFit Score:

It is recommended to deny all outgoing NTLM traffic to remote servers for better security protection. You can find information on how to change the NTLM settings and add exceptions by following the link below.

Guide: Restrict outgoing NTLM traffic to remote servers