FacebookTwitterLinkedInYouTube


Support Login  |  Partner Login  |  Contact Us
products section

Advanced Threat Defense

Today’s information technology landscape is a battlefield, and you’ve been drafted into an epic good vs. evil struggle. As one of the good guys, you’re striving to protect your networks and data from misuse. Meanwhile, the bad guys poke and prod at all of your assets from within and without, looking for the most profitable ways to exploit the holes in your defenses. They do this patiently, mercilessly, inexorably—whether they’re nation-states advancing a political or economic agenda or transnational criminal gangs simply in it for the money.

Providing an important layer of defense-in-depth to your network security infrastructure, Fidelis XPS™ mitigates and prevents the risks of today's advanced and persistent threats, with real-time session-level visibility, analysis, and control for bi-directional communications. By examining all network traffic--at protocol, application, user and content levels—either independently or together for context, Fidelis XPS’ robust controls enhance the network security architecture, allowing for:

Higher probability of detecting advanced threats with multi-dimensional visibility over the entire life cycle of the threat.

  • Visibility over channels, locations, and content across all phases of the threat life cycle
  • Integrated dynamic threat intelligence, threat detection rules and static and dynamic malware detection, and analysis capabilities
  • Ability to consume and operationalize third-party threat intelligence
  • Visibility and control over all network ports and protocols
  • Unique real-time visibility over deeply embedded content-level threats (inbound and outbound)

Faster and more efficient incident response with tightly integrated discovery, investigation, and remediation capabilities.

  • Integrated analyst interface enables security analysts, incident responders and forensics investigators to capture, investigate, and analyze threats in real time
  • Open, flexible policy engine enables analysts to create custom rules to identify and track targeted threats while they are happening
  • All-ports prevention capability enables rapid remediation

Scalable up to tens of Gbps, multiple files per second.

  • Quick, easy setup and deployment

From overall network visibility, to investigation and tracking, to analysis and containment of today’s most sophisticated threats, Fidelis XPS provides the most targeted way to defend against the ongoing  cyber-battles waged by sophisticated adversaries.  Fidelis XPS integrated  Insight threat intelligence feeds and Malware Detection Engine further enable organizations to achieve proactive situational awareness.  By combining threat detection and analysis, enterprises can boost their advanced threat defense against malware and non-malware based threats, important threat vectors for many content-based threats which are proving to be a significant culprit in corporate data theft.

Contact us today to learn more about Fidelis XPS— the only network security solution tested, installed, and defending against advanced threats for enterprises and governments around the globe.

secondary navigation resources

Life Cycle of a Threat: Follow the Trails. Block the Paths.

Fidelis XPS' approach to Advanced Threat Defense gives organizations a powerful tool to deal with targeted, customized attacks or “advanced persistent threats” (APTs). Managing an APT is an ongoing process, not an event, and it has four distinct phases:

Infiltration
Initial penetration into the enterprise network. Can be malware based or non-malware based. Can be server-side, client-side, or even, in rare cases, non-network based.

Communication (Cmd & Ctrl)
Communication with an external malicious command and control system. Can occur on any port or protocol. May or may not involve download of additional malcode. Malware downloaded during this stage is normally packed and inert (non-executable.

Propagation
Lateral movement through the internal network seeking higher levels of privilege and better access to valuable, sensitive or classified information. Often involves staging of information.

Exfiltration
Extraction of target information, typically across the enterprise network perimeter. Can occur over any port or protocol.