FireEye NX 2500

OVERVIEW

      FireEye Network Security is an effective cyber threat protection solution that helps organizations minimize the risk of costly breaches by accurately detecting and immediately stopping advanced, targeted and other evasive attacks hiding in Internet traffic. It facilitates efficient resolution of detected security incidents in minutes with concrete evidence, actionable intelligence and response workflow integration. With FireEye Network Security, organizations are effectively protected against today’s threats whether they exploit Microsoft Windows, Apple OS X operating systems, or application vulnerabilities; are directed at the headquarters or branch offices; or are hidden in a large volume of inbound Internet traffic that has to be inspected in real time.

Technical Advantages

Accurate Threat Detection FireEye Network Security uses multiple analysis techniques to detect attacks with high accuracy and a low rate of false alerts: • Multi-Vector Virtual Execution™ (MVX) engine detects zero-day, multi-flow and other evasive attacks with dynamic, signature-less analysis in a safe, virtual environment. It stops infection and compromise phases of the cyber-attack kill chain by identifying never-beforeseen exploits and malware. • Intelligence-Driven Analysis (IDA) engines detect and block obfuscated, targeted and other customized attacks with contextual, rule-based analysis from realtime insights gathered on the front lines from millions of MVX verdicts, thousands of hours of incident response experience gathered by Mandiant, a FireEye company and hundreds of iSight threat researchers. It stops infection, compromise and intrusion phases of the cyber-attack kill chain by identifying malicious exploits, malware and command and control (CnC) callbacks. It also extracts and submits suspicious network traffic to the MVX engine for a definitive verdict analysis. • Structured Threat Intelligence eXpression (STIX) allows the ingestion of third-party threat intelligence using an industry-standard format to add custom threat indicators into the IDA engines.