I am one of the lead architects for the Recon Sentinel family of products. I am happy to answer any questions about the Recon Sentinel you saw at our retail partner Office Depot / Office Max. Here is what the device is and what it does:

Recon Sentinel is designed to add a layer of detection and defense to anyone’s network. It does this by looking for behaviors that are associated with the first stage of a cyber attack: Reconnaissance.



Currently, The Recon Sentinel has the following capabilities (we have a very rapid development cycle, and are in process of adding additional capabilities):



Network Inventory (Devices and Services)

The Recon Sentinel easily connects to any ethernet port on your network and takes a baseline inventory of all the devices, and all the network services that are running. Any new devices are alerted on, and any new services are shown to the user through the App.



Network Scanning Detection

Malware and Attackers use network reconnaissance scanning to find devices and services on a network that may be misconfigured or vulnerable. Recon Sentinel alerts the user to any network scanning activity on the network.



Cyber Deception

The Recon Sentinel runs deceptive network services, making it look like a device on the network that has interesting and possibly vulnerable services. Any device interacting with these services is considered compromised, as the services are purely deceptive. An alert is generated informing the user of the offending device (attack).



Device Blocking

The Recon Sentinel can “Block” a device on the network by sending specially crafted low-level packets to the device, causing the affected device to send all it’s Internet traffic to the Recon Sentinel, which it in turn discards.



Active Defense Countermeasures (ADC)

If ADC is turned on, any new (“Untrusted”) devices that are attached to the network (wired or wireless) or any devices that are attacking the Recon Sentinel are automatically “blocked” from Internet access until the user unblocks it.

Cybersecurity defense is like an onion... it is best to have multiple layers of detection and defense. Recon Sentinel is an essential layer in the cybersecurity onion.

Recon Sentinel is designed to work with existing firewalls, antivirus, and antimalware software solutions. It is an additional layer of defense, not a replacement of existing defenses.



The device itself is managed through our mobile/web app, and you can manage multiple Recon Sentinels from a single account, and all Recon Sentinels can also be remotely managed via the app as well. Alerts are sent via email or via mobile app notifications.

I hope this was helpful, and let us know if you have any other questions about the Recon Sentinel.



