Check Point SandBlast TE2000XN Appliance
Stop new and unknown threats

Overview:

Product Benefits

• Prevent new and unknown attacks in documents and executable files
• Makes it virtually impossible for hackers to evade detection
• Reduces costs by leveraging existing security infrastructure
• Maximize protection through unified management, monitoring, and reporting
• Increase security with automatic sharing of new attack information with ThreatCloud

Product Features

• Identify new malware hidden in over 40 files types, including: Adobe PDF, Microsoft Office, Java, Flash, executables, and archives
• Protect against attacks targeting multiple Windows OS environments
• A range of appliances are available with scan rates from 100K to 2M file-scans per month
• Threat Extraction removes exploitable content to deliver clean files without delay
• Unique CPU-Level technology catches malware before it has an opportunity to deploy and evade detection

Known Threat Detection

Antivirus uses real-time virus signatures from ThreatCloud™ to detect and block known malware at the gateway before users are affected. Anti-Bot detects bot-infected machines, preventing damages by blocking bot Command & Control communications.

Unknown Threat Detection

The SandBlast Threat Emulation technology employs the fastest and most accurate sandboxing engine available to pre-screen files, protecting your organization from attackers before they enter your network. Traditional sandbox solutions detect malware behavior at the OS level – after the exploitation has occurred and the hacker code is running. They are therefore susceptible to evasion. SandBlast Threat Emulation capability utilizes a unique CPU-level inspection engine which monitors the instruction flow at the CPU-level to detect exploits attempting to bypass OS security controls, effectively stopping attacks before they have a chance to launch.

Promptly Deliver Safe Content

When it comes to threat prevention, there doesn’t have to be a trade-off between speed, coverage and accuracy. Unlike other solutions, Check Point Zero-Day Protection can be deployed in prevent mode, while still maintaining uninterrupted business flow.

SandBlast Threat Extraction removes exploitable content, including active content and embedded objects, reconstructs files to eliminate potential threats, and promptly delivers sanitized content to users to maintain business flow.

Configure Threat Extraction in one of two ways: Quickly provide a reconstructed document to the user, or await response from SandBlast Threat Emulation before determining whether or not to reconstruct the document.