Security Experts:

WatchGuard Adds Sandbox-based APT Protection to UTMs, Firewalls

Seattle, Washington-based network security firm WatchGuard Technologies has added a new level of defense to its Unified Threat Management (UTM) and Next-Gen Firewall (NGFW) appliances to help block Advance Persistent Threats.

Generically called “APT Blocker,” the new feature comes pre-installed on all WatchGuard UTMs and NGFWs and is designed to provide real-time threat visibility and protection.

WatchGuard Adds APT Protection

The new protection feature works by identifying and submitting suspicious files to a cloud-based sandbox for detecting APTs and zero day malware.

The solution also integrates with the company's visibility tool, WatchGuard Dimension, which provides an instant, single view of advanced threats, along with other top trends, applications and threats, the company said.

“APT Blocker's full-system emulation approach to sandboxing provides simple, rapid protection, which doesn't rely on a traditional, signature-based approach to detect and stop advanced malware; in a solution that scales to inspect millions of objects at any given time," said Corey Nachreiner, director of security strategy and research for WatchGuard Technologies.

WatchGuard said that it teamed up with Lastline, a provider of malware protection solutions for businesses, on the cloud-based emulation system.

APT Blocker is available immediately with the launch of version 11.9 of WatchGuard's Fireware security platform, which also includes other services such as AntiVirus, AntiSpam, Application Control and DLP.