FireEye™
| |
|
Overview |
Features |
Benefits |
Knowledge Centre |
|
|
 |
 |
FireEye - Industry-leading protection |
|
Security-conscious organizations choose FireEye for industry-leading protection against the next generation of threats that cross vectors and attack with advanced malware, zero-day, targeted APT attacks.
FireEye's Malware Protection Systems (MPS) supplement traditional and next-generation firewalls, IPS, AV and Web gateways, whose signatures and heuristics cannot stop this next generation of threats.
Today's defenses-event next-generation firewalls-leave significant security holes in the majority of corporate networks. These traditional tools were designed for the known-not the increasingly predominant unknown threats specifically devised to evade detection.
By combining signature and signature-less detection, and integrating inbound and outbound protection, FireEye combats today's stealthy Web and email threats with near-zero false positive rates.
|
FireEye - Complete Protection |
|
Product Features:
|
Web security - Web MPS appliances inspect and protect inbound and outbound Web traffic using a dynamic, real-time Virtual Execution (VX) engine to detonate zero-day attacks and halt their spread and negate their ability to steal data resources.
Email security - Email MPS appliances inspect every attachment and URL for malicious software exploits using our patent-pending VX engine to identify the zero-day, targeted APT attacks within spear phishing emails.
Malware analysis - FireEye's Malware Analysis appliances give threat analysts hands-on control over the powerful VX engine where they can deeply inspect advanced malware embedded in common file formats, email attachments, and Web objects.
Malware Protection Cloud - A real-time global exchange of threat data helps preempt emerging, zero-day attacks.
Central Management System - The FireEye CMS consolidates the management, reporting, and data sharing of FireEye appliances. It serves as the local distribution hub for the malware security intelligence auto-generated within your FireEye deployment. |
|
 |
|
 |
 |
FireEye |
|
FireEye Security Benefits:
Dynamic defenses to stop targeted, zero-day attacks - Analyze network traffic to identify new and unknown attacks in real time, rather than just comparing bits of code to signatures or shielding known vulnerabilities |
Real-time protection to block data exfiltration attempts - Stop outbound callback communications to disrupt compromised systems from being controlled and exploited from the external Command and Control servers |
Integrated inbound and outbound filtering across protocols - Take protective action across multiple protocols in both directions of communications, inbound exploits and infections and outbound callback channel communications to malicious Command and Control servers |
Accurate, low false positive rates - Confirm malware through comprehensive, automated testing that avoids the flood of false alarms inevitable with crude heuristics |
Global intelligence on advanced threats to protect the local network - Efficiently distribute newly confirmed malware intelligence, both within a site and across the Internet, to share the latest insight on both inbound attacks and outbound callbacks |
FireEye's Malware Protection Systems automate these techniques to supplement traditional defenses, adding integrated inbound and outbound protection to combat today's stealthy Web and email threats.
While these traditional security defenses provide a relevant policy enforcement function, they are now outmoded in terms of threat protection. FireEye appliances combine signature-based detections to detect the known with signature-less code execution to reveal the unknown.
By linking inbound and outbound protections with dynamically generated malware intelligence exchanged through the FireEye Malware Protection Cloud, FireEye uniquely short-circuits the multiple stages and subtle communications of next-generation attacks. |
|
|
FireEye |
|
|
 |
| |
Signature-Based Firewall, IPS and AV Catch Known Attacks But NOT Advanced Malware, Zero-Day or Targeted attacks
Heuristic-based protection isn't much better. They predict risk based on suspicious behavior, using clunky algorithms. They generate lots of alerts and are often wrong-falsely positive or falsely negative. Most companies can't afford too many false alarms cluttering up the logs or blocking legitimate traffic. Administrators often "dumb down" available heuristics to catch only the most obvious suspicious behavior. Multi-stage attacks don't trip this coarse-grained radar.
Preventia Ltd is a UK FireEye Partner
