Descriere Markit

Advanced cyber-attack campaigns are perpetrated by a variety of actors with motives ranging from profit to espionage. When attackers get through, you need to know immediately, so you can limit the damage. The only way to know is to deploy technology designed to detect when attackers have bypassed these systems.
Proofpoint ET Pro is a timely and accurate rule set for detecting and blocking advanced threats using your existing network security appliances, such as next-generation firewalls (NGFW) and network intrusion detection/prevention systems (IDS/IPS). ET Pro covers more than 40 different categories of network behaviors, malware command and control, DoS attacks, botnets, informational events, exploits, vulnerabilities, SCADA network protocols, exploit kit activity, and more.

Puncte cheie de vânzare

• Early access to the advanced malware samples from around the world
• An automated sandbox environment, capable of evaluating millions of new malware samples per day and capturing the resulting network behavior
• Dedicated focus on detecting the interaction between the compromised organization and the attackers' command and control systems
• Unwavering commitment to writing and testing high-fidelity detection signatures to minimize false positives
• Extensive signature descriptions, references, and documentation
• Daily updates

Caracteristicile produsului

• Network-based advanced threat detection
  Security teams are often dissatisfied with their network IDS/IPS and NGFW deployments due to the overwhelming number of false positives and their inability to notify them when an actual breach takes place. This is because standard IDS/IPS signatures are designed to detect exploits against known vulnerabilities in hosts on the network - even if the systems are patched and not actually vulnerable. Yet, these security platforms are ideally positioned on the network to monitor for malware activity, including stealth communication to and from the remote command and control sites.
• Focused coverage
  While the Proofpoint ET Pro offers complete coverage for numerous threats, it offers great network-based detection logic to identify malware command and control communications, known bad landing pages, bot nets, communication with drive by sites and other advanced threats - using your existing IDS/IPS or NGFW platform.