Sovereign security.Data always protected.
The SynetoOS NIS 2 Package combines Multi-Factor Authentication, Continuous Authentication and Recovery Point Hold to deliver the technical controls required by the NIS2 directive and aligned with CRA regulation.
Web GUI and CLI login protection with TOTP.
Verify before every critical operation.
Hold Recovery Points beyond SLA retention.
The Beyond Zero Trust by Syneto
In today's security landscape, guaranteeing data integrity is critical. Syneto adopts the "never trust, always verify" principle and applies it continuously: from the initial login through every single high-impact operation on the system.
The NIS 2 Package delivers the technical controls required for NIS2 compliance and aligns with CRA legislation, protecting infrastructures from external threats, session hijacking, unauthorized modifications and accidental deletions.
NIS2 compliance
Technical inspections in accordance with the directive.
Verified identity
Password + TOTP token on every critical action.
Preserved data
RP trattenuti for audit and compliance.
Audit trail
Transparent log in Tasks section.
Verify before every critical operation.
Four stages covering perimeter, runtime and data — from initial login to Recovery Points lock.
MFA: the first line of defense
Multi-Factor Authentication adds a protection layer to the SynetoOS Web GUI and CLI access. Strongly recommended on every production appliance.
How it works
MFA uses a standard TOTP token mechanism, compatible with all major authenticator apps.
Activation in 4 steps
Licensed feature
Starting from SynetoOS 5.3.4, MFA requires a dedicated license. Active OS5 appliances automatically retain entitlement to the feature.
Verify every critical action
Continuous Authentication is an advanced paradigm that requires identity verification not only at login, but at the strategic moments when high-impact operations are executed. A bulwark against session hijacking, human error and insider threats.
Session Hijack Mitigation
Even if an attacker gains an active session using compromised credentials, they will be prompted to re-authenticate with "MFA" for every sensitive action.
Insider Threat
Required OTP before any critical configuration changes. No authorized user can bypass control without the registered device.
Error protection
Prevents accidental deletions or modifications by requiring a deliberate verification before execution.
Protected operations
Virtualization
Data Protection
Administration
Operational flow
Immediate activation
No reboot required. Once enabled from the Security menu, the feature is active for all users in real time.
Who needs Continuous Authentication?
Sectors with high data sensitivity
GDPR, HIPAA, strict compliance
Utility, manufacturing, trasporti
Preserve data beyond of retention policies
The “Hold Recovery Point” feature in SynetoOS lets you manually preserve specific Recovery Points for an extended period, overriding their normal lifecycle. Essential for compliance, audit, testing and Cyber Recovery scenarios.
Protection from deletion
A “held” Recovery Point is protected from two threats:
Use cases
Set Policy, Stay Protected
Disaster Recovery — application-consistent restore in minutes
Compliance rules
With
With application-consistent recovery points
With application-consistent recovery points
With crash-consistent recovery points
Apply compliance rules
At any timeVirtual machines with policy
18 virtual machinesHow to hold a Recovery Point
Important notes
- Only scheduled Recovery Points can be held
- During replication, holds on the source node are not transferred to the destination node
- Upon release, the RP returns immediately to the SLA retention rules
Licensed add-on
Recovery Point Hold is a dedicated add-on of the NIS 2 Package. If the feature is not licensed, related actions appear locked: contact your local service provider to enable it.
Every critical event, tracked and auditable
Login, MFA challenge, Continuous Auth anomalies and blocked deletion attempts: every event recorded and ready to export to your SIEM.
Audit log — critical events
8 / 8Recovery point deletion attempt blocked
MFA challenge passed (TOTP)
Admin login
Continuous Auth: geographic anomaly detected
Recovery Point Hold activated (90 days)
Continuous replication active — RPO 1m
Immutable Recovery Point created (db-prod)
Audit log published to SIEM
Three controls, one unified security posture
MFA, Continuous Authentication and Recovery Point Hold are designed to operate synergistically inside SynetoOS, delivering defense-in-depth aligned with NIS2 and CRA requirements.
MFA
Protects the punto d
PerimeterContinuous Auth
Protects operations. Blocks session hijacking and unauthorized actions.
RuntimeRP Hold
Protects the data. Preserves critical recovery points for compliance and forensics.
GivenNIS 2 Package
Ready for NIS2 compliance?
Talk to our experts to activate the NIS 2 Package on your SynetoOS appliances and strengthen the security posture of your infrastructure.
Personalized demo
30 minutes with an architect, on your real workload.
Explore NIS2 compliance
Continue the journey, explore related products.