WatchGuard Technologies, a Seattle-based provider of firewall hardware, network security and unified threat management (UTM) solutions, has updated its cloud-based Threat Detection and Response (TDR) service for MSSPs.Now, MSSPs can use TDR to automatically analyze suspicious endpoint files within a cloud sandbox and identify behaviors associated with persistent threats, zero day attacks and malware, WatchGuard said in a prepared statement.TDR previously leveraged WatchGuard's APT Blocker cloud sandbox solution to analyze threats from inside the network perimeter, according to WatchGuard.With the TDR update, APT Blocker's next-generation cloud sandboxing capabilities have been extended outside networks, ensuring MSSPs can consume threat data directly from an endpoint for analysis, WatchGuard said.TDR enables MSSPs to service subscriptions without spending as much time at customer sites for new deployments or troubleshooting, WatchGuard said. By doing so, the service helps MSSPs build an additional recurring revenue stream by monetizing continuous threat detection and response services.
What Is TDR?
TDR is a cloud-based service that combines network and endpoint security events with threat intelligence to help MSSPs detect, prioritize and enable immediate action to prevent malware attacks, WatchGuard noted.The service empowers MSSPs with advanced malware defense tools, WatchGuard stated, and these tools include:- APT Blocker: Emulates target environments and safely executes potentially malicious files from both a network and endpoint to analyze their behavior.
- Host Ransomware Prevention (HRP) Module: Uses behavioral analysis to identify ransomware-specific characteristics in cyber threats and automatically shuts down ransomware assaults.
- ThreatSync: Collects and analyzes threat event data in real-time.
