WatchGuard Panda Adaptive Defense 360
Next-Gen Security That Puts An End To Cyberthreats

Overview:

Cybersecurity Built To Provide Optimal Protection With Minimal Management

Mobility, processing, and cloud storage have all revolutionized the corporate network structure. But with all of the advancements made, hackers are still able to find their way in. IT departments receive thousands of malware alerts every week, of which only 19% are considered trustworthy and only 4% are ever investigated. It’s no wonder that two-thirds of a typical cybersecurity administrators’ time is dedicated to managing alerts alone. Endpoint security solutions need to address not only the threats from a cyberattack, but also the lack of resources to manage the process of combatting those attacks. Prevention and detection are key, but so is ensuring that the IT department gains valuable time back to focus on other critical areas by automating the activities associated with the management of the solution deployed.

The Problem With Advanced Cyberdefense Solutions

State-of-the-art cyberattacks are designed to get around the protection provided by traditional security solutions. These types of attacks are becoming more frequent and more sophisticated as hackers become more professionalized. It is also a result of a lack of focus on correcting security vulnerabilities in systems.

Traditional protection platforms (EPPs) are insufficient against these kinds of attacks because they do not provide enough visibility and detail into the processes and applications running on corporate networks. To address this issue, IT departments are adding additional protection in the form of Endpoint Defense and Response (EDR) solutions. The problem with most EDR platforms is the management falls entirely on the security admin, increasing their workload tenfold by requiring them to manage alerts and manually classify threats.

The Solution To Advanced Cyberdefense: Adaptive Defense 360

Panda Adaptive Defense 360 (AD360) is an innovative cybersecurity solution for computers, laptops and servers, delivered from the cloud. It automates the prevention, detection, containment and response to any advanced threat, zero-day malware, ransomware, phishing, in-memory exploits, and malwareless attacks. This level of protection ensures that both present and future threats are eliminated regardless of if they reside inside or outside of the corporate network.

Unlike other solutions that focus solely on EDR capabilities, AD360 combines traditional endpoint protection (EPP) with next-gen automated EDR capabilities providing a full protection model to address both known and unknown threats. Another market differentiator are two key features that AD360 delivers as a service, unlike competitors that leave the management of both to the IT department:

• 100% Classification Service
• Threat Hunting and Investigation Service

Thanks to its cloud architecture, the agent is lightweight and has little impact on endpoints, which are managed via a single cloud architecture, even when they are isolated.

Panda Adaptive Defense 360 is accessible from a single web console. It integrates Cloud Protection and Management Platforms (Aether), which maximize prevention, detection and automated response, minimizing the effort required.

Advanced and Automated Endpoint Security

Traditional protection technologies (EPPs), focused on prevention, are low-cost measures, valid for known threats and malicious behaviors, but they are insufficient. Successfully putting an end to cyberthreats forces a shift away from traditional prevention to a model of continuous prevention, detection and response, assuming at all times that the network has been compromised, and that all endpoints are constantly under attack.

Panda Adaptive Defense 360 allows IT departments to achieve this security posture by integrating traditional EPP technologies with EDR capabilities under a single solution making the network impenetrable against both known and unknown threats.

Traditional Preventive Technologies

• Personal or managed firewall. IDS
• Device control
• Permanent multivector antimalware & on-demand scan
• Managed blacklisting/whitelisting
• Collective Intelligence
• Pre-execution heuristics
• URL filtering - web browsing
• Antispam & Antiphishing
• Anti-tampering
• Email content filtering
• Remediation and rollback

Advanced Security Technologies

• EDR: Continuous endpoint monitoring
• Prevention of the execution of unknown processes
• Cloud-based machine learns to classify 100% of processes (APTs, ransomware, Rootkits, etc.)
• Sandboxing in real environments.
• Behavioral analysis and detection of IoAs (Indicators of Attack) such as scripts, macros, etc.
• Automatic detection and response for targeted attacks and in-memory exploits
• Threat Hunting and forensic analysis

Zero-Trust Model

AD360 operates on a “Zero Trust Model” which is the principle belief that organizations should not trust any entity inside or outside of their perimeter at any time. This methodology is achieved through the managed service that classifies 100% of processes, monitors endpoint activity, and blocks the execution of applications and malicious processes. For each execution, a real time classification verdict is sent of either malicious or legitimate, with no uncertainty, and without intervention by the IT staff. All of this is possible thanks to the capacity, speed, adaptability and scalability of AI and cloud processing.

The service unifies Big Data technologies and multi-level Machine Learning techniques, including deep learning, which is the result of continuous supervision and automation of the experience and knowledge accumulated by Panda’s internal security team.

The managed Threat Hunting and Forensic Analysis Service is operated by a team of experts who use real-time and retrospective profiling, analysis event correlation tools to proactively discover new hacking and evasion techniques and tactics.

The hunters at the Panda Intelligence Center work on the premise that organizations are constantly being compromised.

Benefits:

Simplifies and Minimizes Security Costs

• Managed services means there are no tasks to delegate and no false alerts to manage which reduces the costs of expert personnel needed
• The managed services automatically learn from threats so no time is wasted on manual settings
• Maximum prevention on the endpoint reduces operating costs to almost zero
• No management infrastructure to install, configure or maintain
• Endpoint performance is not impacted since it is based on a lightweight agent and cloud-native architecture

Automates and Reduces Detection Time

• Applications that pose a security risk are blocked (by hash or process name)
• Blocks the execution of threats, zero-day malware, fileless/ malwareless attacks, ransomware and phishing
• Detects and blocks malicious in-memory activity (Exploits) before it can cause damage
• Detects malicious processes that have bypassed preventive measures
• Detects and blocks hacking techniques, tactics and procedures

Automates and Reduces Response and Investigation Time

• Resolution and response via forensic information to investigate each attack attempt and tools to mitigate its effects (disinfection)
• Ability to trace each action of the attacker and their activity, facilitating forensic investigation
• Improvement and adjustments to security policies thanks to the conclusions of the forensic analysis

Modules:

Panda Patch Management

Vulnerability Assessment and Patch Management

Patch Management is an easy-to-use solution for managing vulnerabilities in operating systems and third-party applications on Windows workstations and servers. It covers all the patch management processes including discovering, identifying, assessing, reporting, managing, deploying installations and remediating security risks

• Reduce the attack surface, contain and mitigate vulnerability exploitation attacks, while strengthening your organization’s prevention and containment capabilities.
• Centralized and real-time visibility into the security status of software vulnerabilities, missing patches, updates and unsupported (EOL) software.
• Audit, monitor and prioritize operating system and application updates.

Learn More

Panda Full Encryption

Protect Data with Encryption

Panda Full Encryption is the first line of defense to protect your data in a simple and effective way. It is a full-volume encryption solution that strengthens security against unauthorized access using established authentication mechanisms. Data encryption minimizes data exposure and provides an additional layer of security and control to your organization

• Automatically encrypts and decrypts disks without impacting end users.
• Centrally manages the recovery keys stored on our Cloud-based management platform.
• Prevents loss, theft and unauthorized access to data.

Learn More

Panda Adaptive Defense

Intelligent Endpoint Detection and Response

Intelligent EDR that automates the detection, classification and response to all the endpoint activity. Automatically detects suspicious behaviors to block and respond to breaches, malware and advanced threats.
Its technology is based on the Zero-Trust Application Service, which provides full and accurate visibility on endpoints, applications and users and denies any suspicious execution.

Learn More

Panda Adaptive Defense 360

Advanced Security to Stop Breaches

Unified Endpoint Protection (EPP) and Endpoint Detection and Response (EDR) capabilities, with our unique Zero-Trust Application Service and Threat Hunting Service in one single solution, to effectively detect and classify 100% of processes running on all the endpoints within your organization.
Cloud-delivered endpoint prevention, detection, containment and response technologies against advanced threat, zero-day malware, ransomware, phishing, in-memory exploits and malware-less attacks. It also provides IDS, firewall, device control, email protection, URL & content filtering capabilities.

Learn More

Particulars	Panda Adaptive Defense	Panda Adaptive Defense 360
Lightweight cloud-based agent	✓	✓
Real-time endpoint monitoring	✓	✓
Collective Intelligence lookups in real-time	✓	✓
Cloud-based big data Analytics	✓	✓
Zero-Trust App Service: Pre-execution, execution and post-execution	✓	✓
In memory behavior anti-exploits	✓	✓
Behavioral IOA detection	✓	✓
Protection of systems when files are created		✓
IDS, Firewall and Device Control		✓
Web browsing and Email protection		✓
Category-based URL filtering		✓
Exchange server protection: Antispam and content filtering		✓

Documentation:

Download the WatchGuard Panda Adaptive Defense 360 Datasheet (.PDF)

Download the WatchGuard Panda Adaptive Defense 360 Solution Brief (.PDF)