MSPs emerging as key defence against cyber threats, SonicWall report finds

Report reveals MSPs becoming critical partners in building robust security to combat escalating attacks

MSPs emerging as key defence against cyber threats, SonicWall report finds

Managed service providers are emerging as useful alternatives for organisations, providing an additional human-layer of defence, freeing up valuable resources and time for core business functions, a recent report from SonicWall found.

In its 2024 SonicWall Annual Cyber Threat Report, the vendor exposed all types of cyber behaviours and trends from digital adversaries to help partners build data-driven solutions to keep customers safe.

The report found that customers are increasingly turning to MSPs to alleviate pressure on IT departments.

"In the last year, we saw a 20 per cent increase in the number of intrusion attempts, and we're continuing to see these threats escalate in sheer numbers," SonicWall CEO Bob VanKirk told CRN.

"The volume of threats is also just so immense that most businesses, particularly in the mid-market, require MSPs, given also the cybersecurity skills gap.

"They simply can't keep up on their own. So, we've taken that feedback and are really focused on equipping MSPs with the tools and threat intelligence they need, so they can in turn provide the best possible managed security services to end customers."

VanKirk added that SonicWall is taking a vendor agnostic approach with its MSSP offering.

"We don't require use of SonicWall products. The value is providing those always-on security services to complement what MSPs already deliver.

"This enables them to better serve customers rather than getting locked into specific toolsets."

He said that by partnering for threat detection and response, MSPs can tap into expertise and capacity without large capital investments.

And this helps them overcome the cybersecurity skills shortage while providing the high-level managed security services SMBs need today.

Leveraging tech for security

"With millions of attacks daily, our real time deep memory inspection capability quickly and accurately identifies threats, blocking them or issuing new signatures pushed out to over one million sensors for newly detected variants," VanKirk explained about SonicWall's technology.

"This gives MSPs advanced threat detection to better secure themselves and customers."

And he said the report provides a way of surfacing this threat data widely brings awareness, and through awareness comes power.

"We aim to empower MSPs by revealing the tactics threat actors use, so they can have proactive conversations with customers versus just reacting to attacks.

"It moves cybersecurity out of the shadows into an open, ongoing dialogue about risk and defence."

The report provides actionable insights MSPs can use to assess customer posture and have those critical conversations, rather than just presenting data.

"That aligns with our increased focus on supporting partners and I believe it's the right approach moving forward," VanKirk said.

Advice for MSPs

Michael Crean, VP of managed services at SonicWall, added some advice for MSPs moving forward.

"Fundamentals still matter enormously despite new technologies like AI/ML for threat detection. While those innovations help stay ahead of attacks, basic cyber hygiene remains critical.

"Steps like restricting admin rights, using MFA, avoiding weak passwords, and regular patching shut down lots of easy initial access for attackers.

"We have to crawl before we can walk - get the basics right first, then layer on more advanced tools.

"I advise MSPs that we're in this together but we can't do it for you. MSPs need to ensure customers are doing their part with cybersecurity fundamentals, manufacturers are providing secure products, and we provide detection and response capabilities. It's about an integrated, cohesive effort across the board versus finger-pointing when issues arise."

He added that ongoing training and education are equally important.

"Many organisations still don't patch regularly, which leaves them vulnerable. This isn't about any single product like a firewall. It's about building a robust capability across the entire environment. The fundamentals are a critical piece of that."