Solution

We present the best solution with our allied global vendors.

Visibility and protection without any limitation on the place and company-wide application within a few minutes

Block phishing, web, callback, exploit kit in DNS before the occurrence of an actual session (beginning of the attack)

Blocking threat domains using the real-time DGA (domain generation algorithm) detection function

Detecting and blocking threat domains using an algorithm of simultaneous DNS query generation

Detecting and blocking 5threat domains using an algorithm of analyzing DNS request traffic (SPRank)

Detecting and blocking threat domains using the differences in DNS queries of infected and clean clients

No impact on major business services such as Internet banking

Updating the latest global security threat information collected on CISCO products

Equipped with various latest threat detection engines such as machine learning, hashing, anti-virus, and fuzzy fingerprinting

Holding active preemptive defense technologies that provide information on the rate of vulnerable software and executable file occurrence

Providing the visibility of all process behavior, including malware, using regression analysis

Checking the introduced file continually according to changes in status

Providing all security functions using a single agent

Automatically blocking the encryption behavior of ransomware

Providing automatic IOC (Indicators of Compromise) investigation function by integrating TALOS and third-party threat information – CTR

Providing both on-premise and cloud type

Minimizing false positives using more than 1,000 self-behavior indicators

Disabling sandbox-evading technology such as virtual drive detection, analysis environment detection, and sleep, using proprietary analysis technology

Global correlation analysis between each sample and the definition of past malware

Threat scoring with a proprietary analysis algorithm, considering reliability and severity based on collected information

Providing videos, artifacts, packets, original files

Visualizing the process of analyzed contents

Supporting integration and automation using the REST API

A perfect cloud-native solution that supports deployment in 5 minutes and minimizes user impact

Providing UEBA (User and Entity Behavior Analytics) using machine learning algorithms

Continuous monitoring, and sensitive information detection and protection with the customized policy of the cloud DLP function

Mitigating risks with automatic response measures such as end-user notification, file-level encryption, ownership transfer, and isolation

Checking the cloud application using Apps Firewall and providing its reliability

Creating a whitelist based on the risk profile and access scope and providing use cancellation for all users

Recording the abnormal behavior of the network in real time and analyzing it continuously

Detecting, analyzing, and alarming anomaly based on the baseline of network security

Detecting abnormal behavior such as CnC attack, APT, ransomware, DDoS, unknown malware, and insider threats

Supporting more than 100 security events such as BPS, PPS, new floor, number of received SYN, and RESET occurrence rate

Minimizing false positives through multi-layer machine learning such as trust, entity, and relationship modeling

Conducting a forensics investigation by analyzing network audit trails

Providing visibility into encrypted traffic without a decryption process (ETA)

Providing an e-mail quarantine function based on a sender’s reputation using big data

Removing unnecessary e-mails through spam mail quarantine

Providing a virus quarantine engine for attached files

Checking unknown variant virus files using a sandbox

Graymail filtering

Filtering the attempt to access a dangerous URL

Identifying all users and devices accurately

Conveniently onboarding and provisioning all devices including the guest portal environment

Managing centralized context-aware policies that control user access (who, when, what device)

Providing a robust automatic device classification function using the first integrated device profiler in the industry

Checking the end-point status evaluation of the PC and mobile device to connect.

Checking security compliance by simplifying the policy creation, visibility, and reporting of the company-wide network

Sharing the in-depth context data of users and devices with a wide range of partner solutions using pxGrid technology