Meeting Network Analysis & PCAP Requirements

Trellix Network Security won the NAVWAR Cybersecurity Challenge at identifying never-seen-before (“signature-less”) attacks by observing network activity. It also received the Gold Globe Cyber Security Global Excellence Award for Network Detection & Response (NDR). 

Think of “NDR” as a sibling to “Endpoint Detection & Response (EDR)” working together to detect threats and optimize the response to incidents. Your firewalls and Intrusion Prevention Systems (IPS) block rule-based and known threats…Network Security detects the threats that bypass those defenses. Trellix excels with Network Security in 3 key ways:

• Identifies novel threats that are “signature-less” -- When it identifies suspicious activity, it takes action by setting up an isolated virtual machine that mimics your devices closely, down to the operating system, browser, and system settings. It then executes the potential threat to determine if it's indeed malicious. If so, it thwarts future attacks and prevents compromised devices from unauthorized “call back” communication with attackers.
• Detects the hard to find lateral / east-west movement – Uses SmartVision to detect suspicious internal network traffic that are telltale signs of an attacker moving throughout the network.
• Deploys how you need it – Can be deployed as a physical hardware or virtual appliance on-premise, Cloud IaaS, Cloud SaaS, and hybrid.