Hi, welcome to the next question. It's
nice play. Some is dedicated to anti-malware functionality on
next-generation. Firewalls. Of course, we'll see
how to detect my
angel optimal portion.
We will see how to configure it on
a different platform. How to
detect malware. There's a
two ways. That one is normal by
using signatures definable. Analyzes
traffic for known
signature. No one has ever known infection. So
when we have unknown files or
just Iron Order, Microsoft, Word. Or other
file, which isn't infected with the
particular virus or malware Lewis's. Newest
infection produces be a particular interprint
order, hash. So, when the firehole see
that has
Traffic in Texas as
an hour, and then speaks actions, depending on
what you agreed to do. So more powerful
section by
the signatures is that the infection must be already known
to the Fireballs vendor. So the
fire must be supplied with the latest
signatures and needs to
be young, but the problem is before the attack,
when we do not know where yet
because it's a new Warriors or even though it's completely
new. Bendy detection by
signatures will certainly miss that our
weapon in
our Arsenal. For the mothers action is the
so-called 10 boxing and boxing is
basically attending a file to the cloud
environment, so-called ten bucks environment.
And in that environment, the file will
be
Executive executive ID
and user. And it's going
to be executed on the different operating systems like the
windows Mac OS. After I saw,
you still need to see what
is going to do. If it's really a malware
or it from behind files that cannot do
any harm for Mauritius behavior
and back
to the farm and the 5 alarm and of course, we'll see if I'll
behave but the more important of the fireball real
in future, block. Cash, without any
for a further analyze is because after this
is done in the sandbox environment, the sash
is recorded. And then if that file
with death virus is seen again, in
our Network traffic, it'll be blocked in you.
And of course, there is a water fire.
Next Generation, portable vendors are also have
their endpoint protection products, which
are tightly integrated their firewall and
especially tightly integrated Peterson boxing teacher,
which means that if the end-user
for example, use the USB sticker or
you are guests, the infected
file by the singer fire old because
he tries download this through the home internet connection.
When the user was not connect to the organization. The
file is still
sends to the sandbox environment, because
the endpoint protection agent installed
on the endpoint, on the user workstation.
He's all for the same
sandboxing feature for the 5. Lb
steel, fence to assemblix environment, usually
in the band or club, and executed
their social event.
Be notified immediately or takes like
a few minutes to be downtown and a sturdy, analyzes,
the end going to be informed if the
file is malicious or not. So it follows movie of the endpoint,
Asian food, prevent the file from executing, from the
same vendor of the endpoint Asian. The Fargo guy does
well, this cash. This file is
infected with this particular virus is produces this
fast. And if you touch a traffic, the
5lb block, saw any additional
tries to download at
5 from the internet. The 5 lb blocks immediately without
need for an additional on all because the
endpoint agent already done.
The same in the other
direction. Is the fire moves. He's dead files first
before any and point. Asians. The
Fargo will do the analyze it in the sandbox in the environment,
of course. And then
informed that particular
has, if you seen is
known to be a malicious file. So is nem
points in your organization, tries to
Executive file. It will be
still and freezes after 10
bucks
report. This is
taken from us for a spiral. When was the
similar on the other forms receded. Then
this creates the
following child processes that create the following
file. It creates or modify the
following Windows registry key.
Of course, we're not serious in this
example, but it's not fit on my screen right. At the
end of file is being reported as Malaysia and then
created a crash course. In the
next minute. We will see how to configure the anti mother
and son boxing.
Important notice,
I didn't mention that Horror Story of
vitamins can be in the vendors Cloud,
which is the cheapest option. You need
to face a license, but the cheapest and
safest option or you can purchase the
on-site sandbox appliance which
will be installed on your promises, more expensive
solution. Of course, the sandbox Appliance
must be from the same vendor as the firewall and as the
endpoint if you want to have some just walk
outside box. Appliances is the Privacy.
If your organization is
a thunderstorm policy, which does
not ours sending files, third-party
cloud.
Call Jen. The Walk of Fame of supplies will
be your tickets to
a successful battle because then
you do not have to send any file outside
of Federal Regulation, applies to
learn from the cloud.
Call the mother behave and it will
learn how to test if the file is truly a
militia. But no,
any file to ever, leave your organ. Let's
go to the demo.