Overview

WatchGuard APT Blocker protects businesses from advanced malware threats that traditional signature-based antivirus (AV) software will often miss. Since modern malware is often disguised by updated code, many attacks can slip past these older signature-focused solutions, which are simply monitoring for recognizable patterns. APT Blocker can defend against these threats, and against zero-day attacks for which no signature exists.

WatchGuard APT Blocker’s true benefit is that it focuses on behavior analysis, rather than signatures, to determine if a file is malicious. It identifies and submits suspicious files to a cloud-based next-generation sandbox; a virtual environment where code is analyzed, emulated, and executed to determine its threat potential – all in less than two minutes. APT Blocker’s full system emulation simulates physical hardware including CPU and memory to provide comprehensive protection against known and unknown malware. Users can rest assured that APT Blocker can handle a wide range of documents, including Adobe PDF, RTF, Microsoft Office and all Windows and Android executable files.

APT Blocker’s key differentiators are its behavior-based approach, fast and intuitive deployment, easy usability, and powerful visibility and reporting tools. APT Blocker deploys in seconds as part of WatchGuard’s UTM security suite. Users can allow, drop, block, or quarantine by severity level, as well as enable customized notifications for when APT Blocker detects a threat, all from a single user interface. APT Blocker integrates with the company’s visibility tool, WatchGuard DimensionTM to provide an instant, unified analysis of advanced threats. It also integrates with WatchGuard’s Threat Detection and Response Host Sensors to conduct controlled endpoint threat analysis and stop unknown and elusive off-network attacks.

WatchGuard APT Blocker is a powerful, easy-to-use service that puts a stop to advanced persistent threats that evade traditional signature-based defense.