SonicWALL Capture Advanced Threat Protection for SOHO 250 Series (1-Year Subscription)

SonicWALL 02-SSC-1732 Overview

Enjoy added peace-of-mind against threats with this 1-year Capture Advanced Threat Protection subscription for your SonicWall SOHO 250 series firewall appliance. Capture ATP is a cloud-based multi-engine sandbox service that is designed to detect zero-day threats and hidden malware at the gateway before it can compromise your system.

Multi-Engine Threat Analysis

SonicWall Capture ATP Service extends firewall threat protection to detect and prevent zero-day attacks. The firewall inspects traffic, and it detects and blocks intrusions and known malware. Suspicious files are sent to the SonicWall Capture ATP Cloud for analysis. The multi-engine sandbox platform, which includes Real-Time Deep Memory Inspection, virtualized sandboxing, full system emulation and hypervisor-level analysis technology, executes suspicious code and analyzes behavior, and provides comprehensive visibility to malicious activity while resisting evasion tactics and maximizing zero-day threat detection.

Real-Time Deep Memory Inspection

Enhancing SonicWall's multi-engine Capture ATP service is Real-Time Deep Memory Inspection (RTDMI ) technology. The RTDMI engine proactively detects and blocks mass market, zero-day threats, and unknown malware by inspecting directly in memory. Because of the real-time architecture, SonicWall RTDMI technology is precise, minimizes false positives, and identifies and mitigates sophisticated attacks.

Broad File Type Analysis

The service supports analysis of a broad range of file sizes and types, including executable programs (PE), DLL, PDFs, Microsoft Office documents, archives, JAR and APK, plus multiple operating systems, including Windows and Android. Administrators can customize protection by selecting or excluding files to be sent to the cloud for analysis by file type, file size, sender, recipient or protocol. In addition, administrators can manually submit files to the cloud service for analysis. Malicious files are kept in a database for a month before they are deleted automatically. Benign (good) files are deleted within 24 hours from their analysis timestamp.

Blocks Until Verdict

To prevent potentially malicious files from entering the network, files sent to the cloud service for analysis can be held at the gateway until a verdict is determined.

Rapid Deployment of Remediation Signatures

When a file is identified as malicious, a signature is immediately available to firewalls with the SonicWall Capture ATP subscription to prevent follow-on attacks. In addition, the malware is submitted to the SonicWall Capture Labs threat research team for further analysis and inclusion with threat information into the Gateway Anti-Virus and IPS signature databases. Additionally, it is sent to URL, IP and domain reputation databases within 48 hours.

Reporting and Alerts

The SonicWall Capture ATP Service provides an at-a-glance threat analysis dashboard and reports, which detail the analysis results for files sent to the service, including source, destination and a summary plus details of malware action once detonated. Firewall log alerts provide notification of suspicious files sent to the SonicWall Capture ATP Service, and file analysis verdict.