Cloud-Delivered Security Services Features

Prevention (5)

Intrusion Prevention: Enforces security paramaters to prevent unauthorized access.
Firewall: Protects servers, data center infrastructure and information from a variety of attacks and malware threats.
Encryption: Provide some level of encryption of information, protecting sensitive data while it exists within the data center.
Security hardening: Facilitates system and network security by identifying and remediating vulnerabilities
Cloud Data Protection: Provides high quality and wide scope of in-cloud and offline data security capabilities.

Intrusion Detection: Detects unauthorized access and use of privileged systems.
Security Monitoring: Detects anomalies in functionality, user accessibility, traffic flows, and tampering.
Anti-Malware / Malware Detection: Provides multiple techniques and information sources to alert users of malware occurrences.
Malware Detection: Provides multiple techniques and information sources to alert users of malware occurrences.
Compliance Monitoring: Monitors data quality and send alerts based on violations or misuse.
Threat Alerting: Identifies and alerts administrators of threats, issues, incidents and requests related to SaaS applications.

Compliance: Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.
Administration Console -: Provides a centralized console for administation tasks and unified control.
API / integrations: Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.
Whitelisting: The ability to green light a specific Domain or system to bypass the scanning process.
Policy Enforcement: Abilities to set DNS protection policy control standards including whitelisting, blacklisting, and application access.
Incident Reports: Produces reports detailing suspicious activity and anomalies related to networks and endpoints.
Domain Categorization: Allows administrators to group users and devices based on IP, Endpoint, or role.
Multi-Network Management: Allows centralized administration and control of DNS protection and policies across multiple networks.

Quarantine: Blocks malicious website or destination, redirecting the user to a secure page
Continuous Monitoring: Monitors 24/7 to detect anomalies in functionality, user accessibility, traffic flows, and tampering.
Off-Network Protection: Supports agent-based DNS protection with individual endpoint devices on any network.
Guest Network Protection: Allows DNS filtering and protection for guest WiFi networks.
BYOD Protection: Supports bring-your-own-device (BYOD) users, supporting DNS protection across any device connected to a network or equipped with an agent.
Native DNS over HTTPS (DoH): “DoH” is a protocol that facilitates DNS resolution via HTTPS. Native DoH functionality facilitates DNS over DoH using local agents to manage DNS requests, extending DoH beyond a single browser or network.

DNS Lookups: Associate information from various domains to identify associated parties and threats.
Threat Intelligence: Develops domain reputation by gathering contextual information related to web-based threats.
Advanced Traffic Filtering: Allows DNS routing to resolve requests across HTTP or HTTPs requests and/or covers IPv4 and IPv6 protocols.

Malware Evaluation: Tools to test an object to see whether or not it qualifies as malware.
Sandboxing: Provides a resource-isolated environment to examine malware and evaluate objects against a database of known threats.
Threat Intelligence: Stores information related to common threats and how to resolve them once incidents occur.
File Analysis: Analyze file contents to identify malware components or unknown and advanced threats.

Response Automation: Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Malware Removal: Facilitates the remediation of network, endpoint, and application malware malware.
Data Protection: Protects informatin stored on premises and in the cloud. Prompts additional authentication for suspicious users.