SonicWall Capture Client Advanced - 5 - 24 Endpoints - 3 Year - 02-SSC-1518

The ever-growing threat of ransomware and other malicious malware-based attacks has proven that client protection solutions cannot be measured based only on endpoint compliance. Traditional antivirus technology uses a long-embattled signature-based approach, which has failed to match the pace of emerging malware and evasion techniques.

Additionally, with the proliferation of telecommuting, mobility and BYOD, there is a dire need to deliver consistent protection, application vulnerability intelligence, and web policy enforcement and more for endpoints anywhere. SonicWall Capture Client is a unified endpoint offering with multiple EPP and EDR capabilities.

HIGHLIGHTS

• Get high efficacy, actionable threat detection without the noise
• Centralized and cloud-delivered management with true multi-tenant capabilities to fortify network and endpoint security
• Empower and up-level security and IT teams with an easy-to-use, intuitive solution that stops modern adversaries

Features and Benefits

Continuous behavioral monitoring

• See complete profiles of file, application, process, and network activity
• Protect against both file-based and fileless malware
• Deliver a 360-degree attack view with actionable intelligence

Threat Hunting with Deep Visibility

• Utilize Deep Visibility to search for threats based on behavior indicators as well as Indicators of Compromise (IOC) across covered Windows, MacOS, and Linux devices
• Automate Threat Hunting and Response with Custom Rules and Alerts

Capture Advanced Threat Protection (ATP) integration

• Automatically upload suspicious files on Windows devices for advanced sandboxing analysis
• Find dormant threats before execution such as malware with built-in timing delays
• Reference Capture ATP’s database of file verdicts without the need to upload files to the cloud

Unique rollback capabilities

• Support policies that remove threats completely
• Autonomously restore endpoints to a known good state, before malicious activity initiated

Multiple layered, Heuristic based techniques

• Leverage cloud intelligence, advanced static analysis and dynamic behavioral protection
• Protect against and remediate known and unknown malware before, during, or after an attack

Application Vulnerability Intelligence

• Catalog every installed application and any associated risk
• Examine known vulnerabilities with details of the CVEs and severity levels reported
• Use this data to prioritize patching and reduce the attack surface

Endpoint Network Control

• Add firewall-like controls to the endpoint
• Use an additional quarantine rulebase to handle infected devices

Remote Shell

• Eliminate the need to have physical contact with devices for troubleshooting, changing local configurations, as well as conducting forensic investigations

No need for regular scans or periodic updates

• Enable the highest level of protection at all times without hampering user productivity
• Receive a full scan on install and continuously monitors for suspicious activity continually afterward

Optional integration with SonicWall firewalls

• Enable enforcement of deep packet inspection of encrypted traffic (DPI-SSL) on endpoints • Easily deploy trusted certificates to each endpoint
• Direct unprotected users to a Capture Client download page before accessing the Internet when behind a firewall

Content Filtering

• Block malicious sites IP addresses, and domains
• Increase user productivity by throttling bandwidth or restricting access to objectionable or unproductive web content

Device Control

• Block potentially infected devices from connecting to endpoints
• Use granular allow listing policies

Capture Client Features Specification

Feature	Capture Client – Advanced	Capture Client – Premier
Integration with CSC for Single Pane of Glass, Integrated Reporting and Role-based Access Control	✔	✔
Firewall Enforcement	✔	✔
DPI-SSL Cert Manager	✔	✔
Next-generation AV powered by SentinelOne	✔	✔
Whitelisting of known good applications	✔	✔
Windows server support	✔	✔
Application Vulnerability Intelligence	✔	✔
Attack Visualization	✔	✔
Content Filtering	✔	✔
Next-Generation AV powered by SentinelOne with Rollback	✔	✔
Capture Advanced Threat Protection (ATP) integration to automatically test suspicious files	✔	✔
Capture ATP file verdict lookup	✔	✔
Device Control	✔	✔
Network Control		✔
Remote Shell		✔
Deep Visibility Threat Hunting		✔