Comprehensive Protection and Visibility into Advanced Email Attacks
•
0 likes•111 views
The latest version of the Symantec Cloud Email Security solution provides the strongest protection against Business Email Compromise with new, automated impersonation controls.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Comprehensive Protection and Visibility into Advanced Email Attacks
Similar to Comprehensive Protection and Visibility into Advanced Email Attacks (20)
More from Symantec
More from Symantec (20)
Recently uploaded
Recently uploaded (20)
Comprehensive Protection and Visibility into Advanced Email Attacks
- 1. Extend Content & Malware Analysis Beyond ProxySG to Email and Double Your Security August 31, 2017
- 2. Extend Content & Malware Analysis Beyond ProxySG to Email and Double Your Security Yvonne Dresser Product Strategy, Messaging Gateway Symantec Alan Hall Product Strategy, Content Analysis Symantec
- 4. Why Advanced Threat ProtecJon? Alan Hall Product Strategy, Content Analysis Symantec
- 5. Copyright © 2017 Symantec Corpora:on 5 Car Alarm Syndrome Too many alarms, no one pays aNenJon “…in the case of each large breach over the past few years, the alarms and alerts went off but no one paid aNenJon to them.” – Gartner Analyst, Avivah Litan Computerworld “ ….the FireEye soVware sent an alert with the generic name “malware.binary.” It is possible that Target staff could have viewed this alert as a false posiJve if the system was frequently alarming.” – US Senate Commerce Commi@ee Report
- 7. Copyright © 2017 Symantec Corpora:on 7 High Price of Too Many Alerts “Two-thirds of the Jme spent by security staff responding to malware alerts is wasted because of faulty intelligence.” The Cost of Malware Containment – Ponemon Ins:tute Average Annual Cost $1.27M Inves:gated 4% “Reliable” 19% Weekly alerts created 17,000 Overwhelming Incident Response (IR) Queue • Systems create alarms all types of malware, even common • IR teams can’t reach majority of alarms • Doesn’t “prevent” enough – “detect & respond” is much more expensive process
- 10. Copyright © 2017 Symantec Corpora:on 10 Headquarters Data Center Proxy SMG Web & Cloud (HTTP/HTTPS) Email (SMTP) Hash Reputa:on Custom user whitelist/blacklist + Risk Scoring An:-Malware/An:-Virus Combine Symantec, Kaspersky, Sophos or McAfee Dynamic Sandboxing Virtual Machine + Emula:on Sandboxing Content Analysis • Decrypt, block web threats • Extract documents, ICAP to CA .JAR .EXE Signatures evaluated for known bad Passes acceptable files to user Detonates only truly unknown files BeNer detecJon and protecJon for web and mail threats Superior ATP Architecture SMG integrates with Content Analysis for advanced malware analysis Ac:ve, preventa:ve ATP architecture Reduce sandbox samples & incidents 99% Increase advanced malware detec:on 4x Addi:onal Sandbox On Prem In Cloud Malware Analysis Service (MAS) 2 3 5 1 Predic:ve File Analysis Sta:c Code Analysis, Machine Learning Analyzes code for malicious character 4
- 12. Copyright © 2017 Symantec Corpora:on 12 ENHANCED SIGNATURE DETECTION Symantec’s powerful AV engine added to existing 3rd party engine options DYNAMIC FILE INSPECTION Symantec Advanced Machine Learning (AML) added to all File Inspection licenses CLOUD SANDBOXING Optimize workload and deliver unknown files to cloud for analysis and detonation FULL MALWARE ANALYSIS PARITY Sandboxing that matches your environment – Support for Win10 and sandbox image export/import GEN 2 VIRTUAL APPLIANCES Improved performance – Up to 16X increase – Licensed by core count Content Analysis 2.2 – What’s New
- 14. Copyright © 2017 Symantec Corpora:on 14 • Largest training dataset in the market • Fine tuned engine with very low false posi:ve rate • Supports windows, iOS and MacOS binaries • Proven solu:on on the endpoint and Norton products • Leverage the Global Intelligence Network and gives feedback Symantec™ Advanced Machine Learning Global Intelligence Network (GIN) Content Analysis or ASG
- 17. Copyright © 2017 Symantec Corpora:on 17 Symantec Cloud Sandboxing Sandboxing Dynamic Code analysis. Sta:c Analysis: Decompile/ observe code at the byte level VM VM Behavior DB BMX Content Analysis / ASG 1 2 3 Virtual Bare metal: Hardware execuJon Verdict Sample Kernel Hook
- 18. Copyright © 2017 Symantec Corpora:on 18 Scale to 1.6Gbps on VMware ESX Copyright © 2016 Symantec Corpora:on • Beher Performance • All the value of going virtual • One more deployment op:on • On-demand Malware Capacity New Virtual Appliances: Gen 2 CA VAs Gen 2 CA VA SCALE ESX Gen 1 CA VA MulJ-plarorm Max Throughput 1.6Gbps 100Mbps Max ICAP Conn 1000 200 Pricing Base CPU-based pricing Users Pricing Op:ons 4-64 cores S, M, L Capacity 25, 50, 100, 500, 1000, 2500 Users 16x 5x DIFF DIFF
- 23. Extend Content & Malware Analysis Beyond ProxySG to Email and Double Your Security August 31, 2017
- 24. Symantec Messaging Gateway Meets Content Analysis Yvonne Dresser Product Strategy, Messaging Gateway Symantec
- 28. Copyright © 2017 Symantec Corpora:on 28 SEP Manager Advanced Threat ProtecJon with Content Analysis Internal Messaging Server SEP Agent Global Intelligence Network Blocks targeted aNacks using advanced detec:on technologies - behavior analysis and machine learning Provides rich threat intelligence including key malicious indicators, event :meline & threat risk score Rapid RemediaJon: Perform single- click remedia:on (blacklist, delete malware) of threats on endpoints Messaging Gateway ProxySG Content Analysis
- 35. Copyright © 2017 Symantec Corpora:on 35 3rd Party Email Security Gateways Connect to Content & Malware Analysis for Advanced Threat Protection 3rd party email security gateway Cisco Proofpoint Content Analysis Internet Upgrade your Cisco or Proofpoint Appliances with advanced threat protec:on Provides rich threat intelligence including key malicious indicators, event :meline & threat risk score Rapid RemediaJon: Perform single-click remedia:on (blacklist, delete malware) of threats on endpoints Internal Messaging ServerProxySG SEP Manager SEP Agent
- 38. Copyright © 2017 Symantec Corpora:on 38 EffecJve Threat ProtecJon 1 2 3 Extend Proxy for efficient Web threat protecJon Deliver comprehensive detec:on, analysis, sandboxing and blocking Extend SMG for efficient eMail threat protecJon Keep Email secure and stop phishing and targeted email threats Partner with Symantec for ulJmate security Global Intelligence Network delivers unrivalled threat intelligence to protect your organiza:on Content Analysis Messaging Gateway
- 39. Thank you! 39