A Fortify 24x7 brand. Security run the way a triage station runs: sorted, tagged, and watched.Sign inRaise a consult
MediDefense IT
Station note D / Rounds

Every device on a list, visited on a schedule, in a state somebody can describe.

Rounds is the least interesting station here and the one every other station leans on. Absent a current list of what exists, what state its updates are in, and whether the tablet at the second site still reports, everything else is guessing about its own reach. Windows, Apple hardware and handsets each get a line.

N-able N-sightAddigyZimperium
Four lines, one register, Windows and Apple and mobile
Lines here4
KitN-able N-sight, Addigy, Zimperium
Counted byDevice or handset
OutputA register you can hand over

The register is the deliverable

Ask a practice for its machine count and you generally get a figure somebody recalls rather than a figure somebody produced. That distance is where the trouble lives, because an uncounted PC was never patched, never encrypted and never collected when its owner moved on. The monitoring line assembles the list and holds it current, with nobody maintaining a spreadsheet in the background.

Updates ride the same software, timed around clinic instead of through the middle of one. So does filtering, which stays with a laptop that goes home rather than halting at the practice boundary. One piece of software, one list, and no box in the closet.

An uncounted PC was never patched, never encrypted, and never collected when its owner moved on.

Macs and phones deserve the same list

Apple hardware accumulates quietly at a front desk, and by the time anybody counts there are eleven Macs and a pair of iPads that nothing looks after. Addigy takes enrolment, configuration, encryption state and updates for that group properly, and puts it on the same round as everything else.

Handsets earn a line because a good deal of practice mail is genuinely read on a phone in a corridor. Zimperium decides on the device, so it works with no signal, and it does not require anybody's private browsing to be shipped somewhere for examination. On a phone the member of staff bought themselves, that distinction is what makes the line acceptable to the person carrying it.

Lines at this station

The lines themselves

Rates come live from billing. Anything tagged waits on the chart while you carry on reading.

Fortify-RMMLine specification

Remote Monitoring and Management

N-able N-sight · the round that visits every machine

Watching, updating, scripting and remote support, all off one piece of software, which retires the spreadsheet somebody refreshed twice a year. This line answers what hardware exists and what condition each item is in.

  • Operating system updates and everything else besides, timed outside clinic.
  • A current picture of hardware and installed software on each enrolled machine.
  • Remote support sessions, with no second tool to install beforehand.
Fitted toWindows, macOS and Linux machines that will accept an agent
WatchesUpdate state, disk and service health, inventory, and check-ins
Kept forA live hardware register, and the update history sitting behind it
Escalates toOur desk the moment a machine goes quiet or an update fails
Reviewed byAn engineer walking the round, not a queue nobody opens
Readingper managed device
charged monthly, up front
QTY
Fortify-RMM-DNSLine specification

Web and DNS Filtering

N-able N-sight · filtering handled by that same agent

Filtering by category and by reputation, decided on the device, which keeps it working on a laptop driven home or across to a satellite site. Nothing is racked anywhere and no traffic is rerouted.

  • The rule set goes wherever the hardware goes, on your network or well off it.
  • Blocking by category and by reputation, with exceptions you get to name.
  • A record, device by device, covering requests made and requests refused.
Fitted toMachines already carrying the monitoring agent
WatchesThe lookups and web requests a device makes
Kept forA history of requests and refusals, held per device
Escalates toA block page for the user, and a note to our desk on repeats
Reviewed byAn engineer, whenever a clinical tool needs an exception
Readingper managed device
charged monthly, up front
QTY
Fortify-ControlLine specification

Apple Fleet Management

Addigy · the Apple half of the round

Proper handling for Mac and iPad hardware: enrolment, configuration, updates and inventory, instead of asking people nicely twice a year. Apple hardware collects at front desks and in consulting rooms, and it belongs on the same register as everything else.

  • Hands-off enrolment, where the hardware came through the right channel.
  • Profiles, the state of disk encryption, and updates that actually apply.
  • An inventory of the Apple estate, and remote actions across it.
Fitted toMac, iPad and iPhone hardware enrolled into management
WatchesDrift away from profile, update state, and whether disks are encrypted
Kept forA live Apple inventory with its configuration history behind it
Escalates toOur desk as soon as a device drops out of policy
Reviewed byAn engineer walking the round, beside the Windows estate
Readingper Apple device
charged monthly, up front
QTY
Fortify-MobileLine specification

Mobile Threat Defense

Zimperium · on the handsets practice mail is read on

Detection running on the handset itself for iOS and Android, reaching its conclusion locally rather than shipping traffic off to be inspected. An enormous amount of clinic mail gets read on a phone between rooms.

  • The decision happens on the phone, connection or no connection.
  • Risks from the device, the network, hostile links and hostile apps.
  • What somebody browses privately is not collected, which matters on a personal phone.
Fitted toiOS and Android handsets and tablets, practice-owned or personal
WatchesWhether the handset is sound, plus network, app and link attacks
Kept forA record of what was detected, never a log of private browsing
Escalates toThe person holding the phone, and our desk at the same moment
Reviewed byAn engineer, checking back over what the handset decided
Readingper mobile device
charged monthly, up front
QTY
Referred out

Handed back at this station

Each station has an edge to it, and clinics get caught out by suppliers who pretend otherwise. Below is where this one stops, set down so a practice can work out what else it needs and who else has to supply it.

  • Sealed equipment stays off the round. Imaging units, scanners and analysers locked by their manufacturer will not take management software. We list them, we put a boundary around them, and we call that containment rather than management, because that is what it is.
  • Updates carry their own risk. An update can break a clinical application, so timing, rings and vendor guidance carry more weight in this sector than in almost any other. Nothing gets pushed into a practice management suite because a calendar said it was due.
  • Filtering decides by category. Blocking by category and by reputation removes a great deal. A hostile page hosted inside a service your clinic depends upon is something it will never remove, and saying otherwise would be a lie.
  • Unenrolled handsets are invisible here. A personal phone nobody enrols sits outside this station regardless of what it is used for. That is a policy matter within your practice long before it becomes a technical one on ours.
  • A list is not an analysis. The register is good evidence for a risk analysis to cite. Producing the analysis, and deciding what the register means for your practice, is work that stays with you.
NOTE 01

Heads up: card statements show FORTIFY 24X7 - MediDefense IT is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.