Marketing description

Targeted Attack Protection detects and blocks phishing, spear phishing, watering holes and other email-borne advanced threats during and after delivery. This software also detects sophisticated malware attacks, including: polymorphic and zero-day malware, malicious attachments. Moreover, you can obtain details of attacks, understand the size of the threat, identify specific users that were affected, and get real-time notifications for potential incidents that require investigation.

Key selling points

• Ultimate detection
• Predictive defense
• Follow-me protection
• End-to-end insight

Product features

• Ultimate detection
  Detect sophisticated malware attacks, including: polymorphic and zero-day malware, malicious attachments. In order to detect such advanced malware effectively - whether malware spread via spear-phishing emails containing a malicious attachment, watering hole URLs over email, or longline phishing campaigns - the malware analysis system technology uses a combination of sophisticated techniques to evaluate advance threats such as real-time checks against emerging campaigns and advanced malicious websites that are being detected across organizations, static code analysis that looks for suspicious behavior, obfuscated scripts, malicious code snippets, and redirects to other malicious sites, and dynamic malware analysis that sandboxes the destination URL or suspicious attachments to simulate a real user on a machine, with the goal of observing any changes made to the system.
• Predictive defense
  Proofpoint applies machine-learning heuristics to model email flow at a per-user level, and at a cloud-level across all traffic within Targeted Attack Protection, in order to block URLs even before they host active malware, using a cloud-based process that incorporates Big Data techniques and a real-time scoring engine, including: anomalytics service, kill chain analysis and preemptive sandboxing. Together, these technologies provide the ability to predictively determine what could likely be malicious - and take preemptive steps before any user has a chance to click and have their machine compromised.
• Follow me protection
  Leverage an agentless, cloud-based service with URL intelligence to protect users from malicious links in emails no matter when or where they click on that URL - while working remotely, BYOD, and more. A frequent tactic has been to send users socially engineered emails that are designed to entice the user to click a URL within the email. The URL web destination either automatically initiates a download, or tricks the user to enter sensitive or private information.
• End-to-end insight
  Obtain details of attacks, understand the size of the threat, identify specific users that were affected, and get real-time notifications for potential incidents that require investigation. Proofpoint provides a graphical, web-based threat analysis dashboard that offers data at an organizational, threat, and user levels, enabling you to take immediate action. Administrators, security professionals and incident response teams can analyze how many and what types of email threats are currently being received by the organization, and its comparison to other organizations, identify who has received malicious email threats, who has received malicious attachments, how many messages with the same malicious email threat were delivered, when they were received, which users have clicked, and which users were permitted to the malicious destination through click tracking, and extract malware forensics to determine the behavior that was involved in the targeted threat under question.