WatchGuard Panda Adaptive Defense
Endpoint Detection and Response

Overview:

ORGANIZATIONAL CYBERSECURITY

Mobility, processing, and Cloud storage have all revolutionized the business environment. Workstations are the primary target for most cyber attacks. This is why endpoint security solutions need to be advanced, adaptive, and automatic, with the highest possible levels of prevention and detection.

Organizations receive thousands of weekly malware alerts, of which only 19 percent are considered trustworthy, and only 4 percent of which are ever investigated. Two-thirds of cybersecurity administrators' time is dedicated to managing malware alerts.

SOPHISTICATION OF CYBER ATTACKS

Cyber Defense Against Advanced Threats

State-of-the-art cyber attacks are designed to get around the protection provided by traditional security solutions. These attacks are becoming more frequent and more sophisticated as hackers become more professionalized. It is also a result of a lack of focus on correcting security vulnerabilities in systems.

In light of this scenario, traditional protection platforms are insufficient. This is because they do not provide detailed enough visibility into the processes and applications running on corporate networks.

What's more, some EDR solutions, far from solving anything, create greater stress and increase security administrators' workloads by delegating the responsibility for managing alerts and forcing them to manually classify threats.

PANDA ADAPTIVE DEFENSE

The EDR Solution - Endpoint Detection & Response

Panda Adaptive Defense is an innovative cybersecurity solution for computers, laptops and servers, delivered from the Cloud. It automates the prevention, detection, containment and response to any advanced threat, zero day malware, ransomware, phishing, in-memory exploits, and malwareless attacks, both present and future, inside and outside the corporate network.

Panda Adaptive Defense combines the widest range of automated EDR capabilities. It also has two services, managed by Panda Security experts, which are delivered as a feature of the solution:

• Zero-Trust Application Service
• Threat Hunting Service

Thanks to its Cloud architecture, its agent is lightweight and has little impact on device performance, which are managed via a single Cloud architecture, even when they are isolated.

Panda Adaptive Defense is accessible from a single web console. It integrates Cloud protection and management platforms (Aether), which maximize prevention, detection and automated response, minimizing the effort required.

Benefits:

Simplifies and Minimizes Security Costs

• Its innovative services reduce the costs of expert personnel. There are no false alerts to manage and no responsibility is delegated.
• The services automatically learn from threats. No time wasted on manual settings.
• Maximum prevention on the endpoint. Operating costs reduced to almost zero.
• No management infrastructure to install, configure or maintain.
• Endpoint performance is not impacted, since it is based on a lightweight agent and Cloud-native architecture.

Automates and Reduces Detection Time

• Applications that pose a security risk are blocked (by hash or process name).
• Blocks the execution of threats, zero day malware, fileless/ malwareless attacks, ransomware and phishing.
• Detects and blocks malicious in-memory activity (exploits) before it can cause damage.
• Detects malicious processes that have gotten around preventive measures.
• Detects and blocks hacking techniques, tactics and procedures.

Automates and Reduces Response and Investigation Time

• Resolution and response: forensic information to thoroughly investigate each attack attempt, and tools to mitigate its effects (disinfection).
• Traceability of each action; actionable visibility of the attacker and their activity, facilitating forensic investigation.
• Improvement and adjustments to security policies thanks to the conclusions of the forensic analysis.

ADVANCED AND AUTOMATED ENDPOINT SECURITY

Traditional protection technologies are low-cost measures focused on prevention, valid for known threats and malicious behaviors, but they are insufficient. Successfully defending an organization and putting an end to cyber threats forces a shift away from traditional prevention to continuous prevention, detection and response, assuming at all times that the organization has been compromised, and that all endpoints are constantly being threatened by attackers.

Panda Adaptive Defense integrates traditional preventive technologies with innovative, adaptive prevention, detection and response technologies in a single solution, to deal with advanced cyber threats, both present and future:

• Traditional Preventive Technologies
• Permanent multi-vector anti-malware & on-demand scan
• Managed blacklisting/whitelisting
• Collective Intelligence
• Pre-execution heuristics
• Anti-tampering
• Remediation and rollback
• Advanced Security Technologies
• EDR: continuous endpoint monitoring
• Prevention of execution of unknown processes
• Cloud-based machine learning to classify 100% of processes (APTs, ransomware, rootkits, etc.)
• Sandboxing in real environments
• Behavioral analysis and detection of IoAs (indicators of attack) such as scripts, macros, etc.
• Threat hunting and forensic analysis

ZERO-TRUST APPLICATION SERVICE

An innovative service that classifies 100% of processes, monitors endpoint activity, and blocks the execution of applications and malicious processes. For each execution, it sends out a real-time classification verdict, malicious or legitimate, with no uncertainty and without delegating to the client. All of this is possible thanks to the capacity, speed, adaptability and scalability of AI and Cloud processing.

The service unifies big data technologies and multi-level machine learning techniques including deep learning, the results of continuous supervision and the automation of the experience and knowledge accumulated by Panda Security's security and threat team.

The Threat Hunting service is operated by a team of experts who use profiling analysis and event correlation tools to proactively discover new hacking and evasion techniques. The hunters at the Panda Intelligence Center work on the premise that organizations are constantly being compromised.

Modules:

Panda Patch Management

Vulnerability Assessment and Patch Management

Patch Management is an easy-to-use solution for managing vulnerabilities in operating systems and third-party applications on Windows workstations and servers. It covers all the patch management processes including discovering, identifying, assessing, reporting, managing, deploying installations and remediating security risks

• Reduce the attack surface, contain and mitigate vulnerability exploitation attacks, while strengthening your organization’s prevention and containment capabilities.
• Centralized and real-time visibility into the security status of software vulnerabilities, missing patches, updates and unsupported (EOL) software.
• Audit, monitor and prioritize operating system and application updates.

Learn More

Panda Full Encryption

Protect Data with Encryption

Panda Full Encryption is the first line of defense to protect your data in a simple and effective way. It is a full-volume encryption solution that strengthens security against unauthorized access using established authentication mechanisms. Data encryption minimizes data exposure and provides an additional layer of security and control to your organization

• Automatically encrypts and decrypts disks without impacting end users.
• Centrally manages the recovery keys stored on our Cloud-based management platform.
• Prevents loss, theft and unauthorized access to data.

Learn More

Panda Adaptive Defense

Intelligent Endpoint Detection and Response

Intelligent EDR that automates the detection, classification and response to all the endpoint activity. Automatically detects suspicious behaviors to block and respond to breaches, malware and advanced threats.
Its technology is based on the Zero-Trust Application Service, which provides full and accurate visibility on endpoints, applications and users and denies any suspicious execution.

Learn More

Panda Adaptive Defense 360

Advanced Security to Stop Breaches

Unified Endpoint Protection (EPP) and Endpoint Detection and Response (EDR) capabilities, with our unique Zero-Trust Application Service and Threat Hunting Service in one single solution, to effectively detect and classify 100% of processes running on all the endpoints within your organization.
Cloud-delivered endpoint prevention, detection, containment and response technologies against advanced threat, zero-day malware, ransomware, phishing, in-memory exploits and malware-less attacks. It also provides IDS, firewall, device control, email protection, URL & content filtering capabilities.

Learn More

Particulars	Panda Adaptive Defense	Panda Adaptive Defense 360
Lightweight cloud-based agent	✓	✓
Real-time endpoint monitoring	✓	✓
Collective Intelligence lookups in real-time	✓	✓
Cloud-based big data Analytics	✓	✓
Zero-Trust App Service: Pre-execution, execution and post-execution	✓	✓
In memory behavior anti-exploits	✓	✓
Behavioral IOA detection	✓	✓
Protection of systems when files are created		✓
IDS, Firewall and Device Control		✓
Web browsing and Email protection		✓
Category-based URL filtering		✓
Exchange server protection: Antispam and content filtering		✓

Documentation:

Download the WatchGuard Panda Adaptive Defense Datasheet (.PDF)