--- title: Save Your Spot | Beyond Identity Webinar description: Learn how CrowdStrike ITDR and Beyond Identity shut down credential-based attacks in legacy systems by enforcing phishing-resistant MFA on NTLM, Kerberos, and LDAP — no infrastructure changes required. image: https://insights.beyondidentity.com/hubfs/Rebranded%20Webinar%20Slides%20(8).png --- ![logo-primary-green](https://insights.beyondidentity.com/hs-fs/hubfs/logo-primary-green.png?width=250&height=31&name=logo-primary-green.png "logo-primary-green") # Stop Lateral Movement in On-Prem Apps How to Extend Modern Identity Security to Legacy Protocols *T**uesday, September 30th, 2025 at 12:00 pm ET * When credentials are stolen, legacy systems fail: UnitedHealth paid a $22M ransom after attackers accessed a Citrix portal with no MFA, and Microsoft was breached through a forgotten legacy account.  Most teams don’t realize that stolen credentials can be rendered useless, even in on-prem environments. Join us to see how CrowdStrike ITDR and Beyond Identity enforce phishing-resistant, device-bound authentication on protocols like NTLM, Kerberos, and LDAP, without ripping out current infrastructure. You'll learn how to: - Block initial access with stolen credentials - Stop lateral movement via RDP, SSH, VPN - Prevent outdated security exploits CrowdStrike stops breaches. Beyond Identity prevents them at initial access.  # Stop Lateral Movement in On-Prem Apps How to Extend Modern Identity Security to Legacy Protocols *T**uesday, September 30th, 2025 at 12:00 pm ET * When credentials are stolen, legacy systems fail: UnitedHealth paid a $22M ransom after attackers accessed a Citrix portal with no MFA, and Microsoft was breached through a forgotten legacy account.  Most teams don’t realize that stolen credentials can be rendered useless, even in on-prem environments. Join us to see how CrowdStrike ITDR and Beyond Identity enforce phishing-resistant, device-bound authentication on protocols like NTLM, Kerberos, and LDAP, without ripping out current infrastructure. You'll learn how to: - Block initial access with stolen credentials - Stop lateral movement via RDP, SSH, VPN - Prevent outdated security exploits CrowdStrike stops breaches. Beyond Identity prevents them at initial access.  ![Rebranded Webinar Slides (8)](https://insights.beyondidentity.com/hubfs/Rebranded%20Webinar%20Slides%20(8).png "Rebranded Webinar Slides (8)") ![Jasson Casey Webinar - landing page-1](https://insights.beyondidentity.com/hs-fs/hubfs/Jasson%20Casey%20Webinar%20-%20landing%20page-1.png?width=1457&height=994&name=Jasson%20Casey%20Webinar%20-%20landing%20page-1.png "Jasson Casey Webinar - landing page-1") © Beyond Identity