Advanced Persistent Threat Protection

Today’s information technology landscape is a battlefield, and you’ve been drafted into an epic good vs. evil struggle. As one of the good guys, you’re striving to protect your networks and data from misuse. Meanwhile, the bad guys poke and prod at all of your assets from within and without, looking for the most profitable ways to exploit the holes in your defenses. They do this patiently, mercilessly, inexorably—whether they’re nation-states advancing a political or economic agenda or transnational criminal gangs simply in it for the money. 

Providing an important layer of defense-in-depth to your network security infrastructure, Fidelis XPS™ mitigates and prevents the risks of today's advanced and persistent threats, with real-time session-level visibility, analysis, and control for bi-directional communications. By examining all network traffic--at protocol, application, user and content levels—either independently or together for context, Fidelis XPS’ robust controls enhance the network security architecture, allowing for proactive advanced threat management and more efficient incident response.

From overall network visibility, to investigation and tracking, to analysis and containment of today’s most sophisticated threats, Fidelis XPS provides the most targeted way to defend against the ongoing cyber-battles waged by sophisticated adversaries.  Fidelis XPS integrated threat intelligence feeds further enhance automated intelligence sharing, enabling organizations to achieve proactive situational awareness. With this higher level of automated intelligence, Fidelis XPS can prevent cyber attacks and provide advanced persistent threat (APT) protection.

Session-level Visibility, Analysis & Control– As the threat has evolved to target applications and end users, traditional deep packet inspection technology has failed to keep up.  Fidelis XPS Deep Session Inspection® technology provides visibility, analysis, and control from the protocol, through enterprise content to ensure sensitive information is protected.  Fidelis XPS features include:

• Port-independent inspection covering all 65,535 ports on multi-gigabit speed networks;
• Content inspection for protected/sensitive information;
• Content inspection for malicious traffic and payloads;
• Port-hopping/tunneling detection;
• Data flows to unexpected countries; and
• Rogue encryption at both the network and file level.
• Examining all network traffic--at protocol, application, user and content levels—either independently or together for context.

Proactive Situational Awareness– Fidelis XPS’ robust controls enhance the network security architecture, increasing your view of your situational awareness, allowing for a proactive approach to managing advanced threats and more efficient incident response.  From attack identification and containment, through to mitigation, Fidelis XPS can.

• Identify compromised hosts due to transfers of sensitive or protected information, non-normal, or  high-risk network traffic.
• Send feeds on session-level network information for event correlation (SEIM, log management, etc.).
• Determine information transferred and, if desired, prevent further transfer of information.
• Block malicious communications (e.g., Command & Control, propagation).
• Block malicious payloads based on knowledge from compromised systems.

Actionable Threat Intelligence--Integrated threat intelligence feeds provide dynamic, reputation-based policy updates to Fidelis XPS sensors, which then enforce those policies on network traffic in real time - unlike signature-based solutions that are easy to evade, or reputational data tied to a small number of ports, Fidelis XPS brings real-time reputational knowledge to life for all 65,535 ports along with the unparalleled visibility and control of network traffic needed to mitigate today’s advanced and persistent threats.

Contact us today to learn more about Fidelis XPS— the only network security solution tested, installed, and managing advanced threats for enterprises and governments around the globe.