MEDHOST Uses ExtraHop RevealX to Help Protect Healthcare Customers and Patients

Secure decryption and traffic inspection

• "ExtraHop can decrypt and inspect things like Active Directory and TLS 1.3 protocols in-line across my entire network, including east-west traffic. I don't have to go through 15 change management cycles and three months' worth of work with development teams and server teams just to go see our own traffic. It's game-changing,” says Williams.
  
  

Deep visibility

• "Visibility used to be a real issue. ExtraHop really opened our eyes and allowed us to put our arms around all the data—especially with the addition of RevealX, which gives us behavior monitoring. It's always watching. Combined with our log aggregation, RevealX gives us a complete picture of activity that's happening on the network,” says Williams.

Baked-in security

• ExtraHop allows MEDHOST to build security frameworks and layered security controls right down to the OSI layer.
  
  

The fifth man

• MEDHOST security currently consists of four engineers, and Williams describes RevealX as "the 5th man,” because it scans and records even when the security team isn't present.
  
  

Detection of threats other tools miss

• "Right out of the box, we plugged RevealX into the network and turned it on at 8:00, and it was scanning our network by 8:01. As the day went on, we continued to get alerts—but none of our other security tools indicated that we had an issue. After a simulation of the domain takeover at 8:00 that night, we finally got an alert from another tool indicating that an incident had taken place—far too late to act on the information,” says Williams.