Solution Offering

Next Generation Firewall Solutions

CorpClouds Next Generation Firewall Solutions are a suite of managed network security solutions that are cost effective and easy to deploy. The solution offers comprehensive protection including firewall, anti-virus, anti-spam, URL filtering Anti Malware and more. Also available are subscription based services that globally monitor for new threat signatures to ensure that your business is protected in real time. This helps protect your MPLS private network and applications from being compromised by the increasing numbers of security threats.

Standard Firewall Functionality with all Hosted Firewall Solutions

• Application Visibility & Control (ACC)
• User Visibility & Control
• IPS
• Advanced Persistent Threat (APT) Prevention
• Anti-Malware
• Command & Control
• Passive DNS
• Data Filtering
• Policy Control
• Decryption
• Exploit Protection

Recommended Subscription Based Features

Threat Prevention Subscription Based Feature (Updates Every 15 Minutes)

• Anti-Malware Database
• APT Prevention Database
• Malicious Files Database
• Malicious DNS List Database
• Exploit Protection Database

URL Filter Subscription Based Feature (Updates Every 15 Minutes)

• URL Filtering Database
• Malicious Site Database
• DNS Database Monitoring
• URL Categorisation

Active Threat Prevention Subscription Based Feature

• Analysis For Unknown Treats
• Looks at all traffic and files for 250 potential malicious behaviours
• If suspected threat does not match existing database definitions it is blocked and sent to our Active Threat Prevention Global centre for analysis
• Threat Signature is recorded and then sent to subscription databases

Features & Benefits

Reducing Your Risk by Allowing More !!!

In the Past reducing your security risk profile meant limiting access to applications like Webmail and social media. Today reducing your security risk profile means safely allowing these types of applications by using a policy approach to strike a balance between the the old block everything or the allow-everything approaches.

This balance can be achieve with the following features:

• Application groups & SSL Decryption: Group your applications into categories like Web mail, Social Media or IM. Then limit the ones that are not used for business purposes. They inspect all traffic from these applications and submit suspect files, EXE, DLL, ZIP, PDF to our Active Threat Detection service for analysis.
• Advanced URL Filtering: Use advanced URL Filtering to Control Web traffic for all users. Scan all traffic and limit browsing to business related sites, blocking obvious non-work related sites.
• Protocol Blocking: Block Protocols like peer-to-peer, file transfer & Bit Torrent applications.

Features to Protect Your Enabled Applications & Content

• Intrusion Prevention System (IPS): Block network and application vulnerability exploits, buffer overflows, DoS attacks & port scans.
• Antivirus/Anti-Spyware Protection: Block malware, including those hidden within compressed files, PDF viruses & Web traffic.Encrypted traffic can be decrypted and then analysed for threats.
• Active Threat Detection: Unknown or targeted malware can be blocked and sent to our Active Threat Detection subscription services for identity and analysis. This service observes and executes unknown files in a sandbox environment. If previously unknown malware is detected a signature is created and reported through the service globally within 15 minutes.
• Bot-Infected Hosts Identification Automatically search for Suspicious unknown traffic, suspicious DNS, and URL queries with infected hosts. Apply our Active Threat Detection global intelligence to intercept and block DNS queries for malicious domains.
• Limit Unauthorised File & Data Transfers. The Data filtering features allow you to implement policies to reduce the risks associated with unauthorised file and data transfers. The Data filtering features can detect and control the downloads of confidential data patterns like credit card numbers, as well as other custom patterns.

Network Security Management

Our Next-Generation Firewall solution can be managed through CloudSys giving our customers a full-featured browser-based interface.

Reporting

Reporting can be generated through CloudSys. You can generate specific reports at any time or have auto generated reports emailed on a scheduled basis.

Logging

Real-time logging of all aspects of your firewall can be generated and the results can be exported to a CSV file.

Solution Offering

Next Generation Threat Detection Solution

CorpCloud's Next Generation Firewall is delivered with the following functionality:

• Application Visibility & Control (ACC)
• User Visibility & Control
• IPS
• Advanced Persistent Threat (APT) Prevention
• Anti-Malware
• Command & Control
• Passive DNS
• Data Filtering
• Policy Control
• Decryption
• Exploit Protection
• SSL VPN

Threat Detection Subscription Based Solution (Updates Every 15 Minutes)

• Anti-Malware Database
• APT Prevention Database
• Malicious Files Database
• Malicious DNS List Database
• Exploit Protection Database
• Full integration with the Next Generation Firewall Solution

URL Filter Subscription Based Solution (Updates Every 15 Minutes)

• URL Filtering Database
• Malicious Site Database
• DNS Database Monitoring
• URL Categorisation
• Full integration with the Next Generation Firewall Solution

Active Threat Prevention Subscription Based Feature Zero Date Exploit Protection

• Analysis For Unknown Treats
• Looks at all traffic and files for 250 potential malicious behaviours
• If suspected threat does not match existing database definitions it is blocked and sent to our Active Threat Prevention Global centre for analysis
• Threat Signature is recorded and then sent to subscription databases
• Full integration with the Next Generation Firewall Solution

Features & Benefits

Continually Updated Threat Definitions & Zero Day Exploit Analysis

Threat Prevention Subscription Based Features & Benefits

• Protections automatically updated every 15 minutes, making sure your defences keep pace with the latest attacks.
• Prevents a wide variety of threats, including vulnerability exploits, malware, and botnets.
• Detects and prevents threats hidden within SSL-encrypted traffic.
• Outsmarts malware by focusing on payload, instead of hash or filename.
• Actionable, correlated forensics and reporting for fast remediation.
• Full integration with the Next Generation Firewall Solution

URL Filter Subscription Based Features & Benefits

• Reduced infections from known malware sites
• Fast URL lookup with customised URL database
• Customisable web access with black and white lists
• Granular control over SSL decryption
• Frequent database updates covering unknown threats
• Full integration with the Next Generation Firewall Solution

Active Threat Prevention Subscription Based Features & Benefits

• Our Active Threat Prevention Subscription identifies unknown advanced persistent threats (APTs) through dynamic analysis
• Automatically sends protections in near real-time to help security teams meet the challenge of advanced cyberattacks.
• Classifies all traffic, inclusive of threats and the applications that carry them — regardless of port or SSL encryption.
• Identifies unknown malware and zero-day exploits using advanced static and dynamic analysis techniques.
• Combines complete visibility and control over known threats and applications with cloud-based dynamic analysis of unknown threats to ensure accurate, safe and scalable malware analysis.
• True in-line blocking of exploitive and malicious files, as well as malware delivery websites and command-and- control traffic.
• Full integration with the Next Generation Firewall Solution