0

Jet Server Level Ransomware Attack issue

Robert John Ramirez

June 26, 2019 16:50

None

Follow

Hi Everyone,

 

In case of a possible "ransomware" attack on Jet Server, scenario is that the account used by the hacker is the one used in the configuration and setup of Jet Reports and Analytics components. What would be the best step to do if the mitigation action taken was to delete that particular account in the domain? Technically that means, Jet components will not be accessible through that account (the deleted one). Would that mean a rebuilding of the entire Jet server Level Setup?

Appreciate your best advise.
Thank you

• Facebook
• Twitter
• LinkedIn

4 comments

• 0
  
  Harry Lewis June 26, 2019 17:31

  Hello Robert -

  Just as when using an account for which the password can change, the Jet Service Tier and all the components would need to be re-installed.

• 0
  
  Robert John Ramirez June 27, 2019 02:37

  Hi Larry,

   

  Thank you for the help. 

  One more thing, that means in the event of compromising the Jet server level setup particular to the account assigned, would that always mean a re-installation of the components?

  Is there any other prevention that we can make securing the setup of Jet. What we are looking is security of the setup which is not vulnerable to such attack and others. 

• 1
  
  Harry Lewis June 27, 2019 14:07

  Hello Robert -

  In order to ensure that organizations and system administrators have the flexibility they need to secure their environments as per their own internal processes and standards, Jet products do not impose any specific restrictions beyond the permissions required for individuals to use the products.

  In this way, those organizations and administrators can choose whatever best-in-class or full-suite methods best fit their individual needs.

• 0
  
  Robert John Ramirez June 28, 2019 04:55

  Hi Harry,

  I agree on you on that.

  Thank you for your help.