Description
Description: CAPT SEC APPL CSA 1000 INTELLIGENCE 5YR
SonicWall CSa 1000 – Security appliance – with 5 years Intelligence Updates and Support Bundle – 10 GigE – 1U – rack-mountable
The SonicWall Capture Security appliance (CSa) brings Capture Advanced Threat Protection (ATP) and sandboxing malware analysis to on-premises deployment scenarios for customers with compliance and policy restrictions against sending files to cloud analysis, or who prefer for all of their data to remain inside their organization. The CSa 1000 can analyze suspicious files coming from other SonicWall products to provide rapid, high-accuracy detection of previously unseen threats with the customer retaining custody of their files. Additionally, the REST API functionality on the CSa opens up the benefits of this highly effective file analysis capability to threat intelligence teams, third-party security systems and any software stack that can integrate with published APIs. The CSa uses a combination of reputation-based checks, static file analysis and SonicWall’s patented Real-Time Deep Memory Inspection (RTDMI) engine for dynamic analysis to ensure that it provides not only the perfect detection rate of malicious files, but also does this efficiently, in short times. The SonicWall ecosystem of security products, already fully integrated with the cloud-delivered Capture ATP analysis, is able to enforce inline security with features, such as Block Until Verdict.
Key Selling Points
Reputation and global verdict lookup
Static analysis and dynamic analysis with RTDMI
Whitelist/blacklist on hash/domain
Configurable scheduled reporting
Role-based administration
Management – HTTPS or SSH via dedicated management interface or regular network interface
SSH console access
Logging and alerting
False positive and false negative reporting with automatic whitelist/blacklist
Direct connectivity or via VPN (IP addressable)
Closed network operation
REST API support for file submission and analysis
Local logging