WatchGuard APT Blocker

APT Blocker is the module and new service of security for WatchGuard XTM and Firebox T10.

On July 4, 2014 the WatchGuard Technologies company announced the output of the updated module APT Blocker. It integrated structures of the unified management of threats of WatchGuard XTM and Firebox of the T10 became the additional security level for the UTM platforms.

Developers characterize it as well scalable system of detection of zero day based on cloud computing, focused on the enterprises with the distributed structure which are looking for the maximum protection. The APT Blocker service takes files from all WatchGuard firewalls with APT of Blocker-ohms set on them that allows to classify and separate the received harmful DNA, thereby offering protection of zero day within several minutes after threat detection.

For receiving detailed idea of accomplishment of the malware, Blocker-and APT technology use complete system emulation (CPU and memory). After the first start through other security services of WatchGuard, at files remove "prints" and check on the existing databases - at first on the device, then in a cloud. If the file is not noticed before, it is analyzed in APT a cloud using the system emulator which monitors accomplishment of all instructions. It can define those methods of deviation which pass other "sandboxes".

APT Blocker is a part of multilevel protection and includes a set of functions

APT Blocker uses a combination of local search and the cloud analysis for Zero Day detection