Sourcefire FireAMP (Advanced Malware Protection)

Sourcefire FireAMP technology (AMP – Advanced Malware Protection) for detection, the analysis and blocking of all types of the malicious software. The Sourcefire FireAMP technology is one of the first technology in the market considerably increasing level of protection of the companies against all types of network threats. Sourcefire FireAMP uses the following services of protection:

• FireCLOUD is the service based on "cloud" technologies and giving ample opportunities for detection and assessment of all types of network threats.
• File Trajectory is the service allowing to trace a way of movement of files in the company and, thus, to define point of entry and propagation paths of the malicious software.
• File Analysis is the service providing detailed information on behavior of the malicious software.
• Outbreak Control is the service giving the chance to users to create rules of detection of threats which will instantly block network invasions.
• Cloud Recall is the service based on "cloud" technologies and allowing to perform the continuous analysis of activities of files for detection and blocking of network threats which were missed at the previous scannings.

The Sourcefire FireAMP technology uses the small program agent which allows to establish connection with analytical "cloud" service and to receive only necessary metadata for threat assessment.

"In development process of FireAMP technology we communicated with more than 100 large companies and found out that even if the organizations use the latest security technologies, all of them equally face penetration of the malicious software into network, - Oliver Friedrichs, the senior vice president of Sourcefire Cloud Technology Group says. - We developed FireAMP technology especially for the companies which want to raise the security level considerably. Can quickly determine by this technology of the organization what systems are infected as there was infection what its scales, and as the malware behaves".

The Sourcefire FireAMP technology has flexible potential of creation of reports, using which it is possible to obtain the detailed information on suspicious computers and also on point of entry of network threats.

2014: Integration

On February 25, 2014 the Cisco company announced integration of a system of protection against a malicious code of Sourcefire FireAMP (Advanced Malware Protection) with developments of Cisco on security of content Cisco E-mail Security Appliance, Cisco Web Security Appliance и Cisco Cloud Web Security.

According to vendor, integration will give to customers the comprehensive software solution of protection against a malicious code which detects and blocks the attack, carries out monitoring of traffic and the retrospective analysis of the processed files by means of use of new information on threats.