System and method for secure user access and agentless lateral movement protection from ransomware for endpoints deployed under a default gateway with point to point links

A system for providing protection from ransomware attacks, comprising:

• an endpoint device of an enterprise network environment;
• an extended enterprise browser installed on the endpoint device, the extended enterprise browser having an extension to a browser supporting at least two different endpoint authentication security certificates corresponding to at least two different ransomware risk level postures;
• the endpoint device being provisioned with the at least two different respective endpoint authentication security certificates stored in a secure store of the endpoint device;
• the extended enterprise browser configured to authenticate a user of the endpoint with an identity provider, wherein an endpoint authentication security certificate is selected by the extended enterprise browser based on at least one of a ransomware threat risk level of the endpoint device and a ransomware threat risk level of the enterprise network environment;
• and
• a Trusted Platform Module (TPM) associated with the endpoint device blocking access to ransomware man in the middle (MITM) proxy attacks of the at least two endpoint authentication security certificates;
• wherein the endpoint device in one of a plurality of endpoint devices deployed in a Virtual Local Area Network (VLAN) having a security appliance configured as a default gateway for intra-VLAN communication of the plurality of endpoint devices using a subnet mask of 255.255.255.255.

A system for providing protection from ransomware attacks, comprising:

• a Virtual Local Area Network (VLAN) apparatus of a VLAN access or trunk port, the VLAN apparatus including a security appliance configured as a default gateway for intra-VLAN communication of a plurality of endpoint devices using a subnet mask of 255.255.255.255;
• the security appliance configured to monitor intra-VLAN message traffic, allow only authorized intra-VLAN communication and detect lateral propagation of ransomware;
• at least one of the plurality of endpoint device having an extended enterprise browser supporting at least two different endpoint authentication security certificates corresponding to at least two different ransomware risk level postures;
• the extended enterprise browser operating from an endpoint device provisioned with the at least two different endpoint authentication security certificates stored in a secure store of the endpoint device;
• the extended enterprise browser configured to authenticate a user of the endpoint with an identity provider, wherein the authentication security certificate is selected by the extended enterprise browser based on at least one of a ransomware threat risk level of the endpoint device and a ransomware threat risk level of an enterprise environment;
• and
• a Trusted Platform Module (TPM) of the endpoint device to block access to ransomware man in the middle (MITM) proxy attacks of the at least two endpoint authentication security certificates.