Every enterprise endpoint and server is a defenseless blind spot for advanced threats. Traditional defenses such as antivirus are unable to detect or stop stealthy attacks orchestrated by malicious actors, or help companies respond to security incidents. Bit9 and Carbon Black, which announced their merger on
The integration of Bit9 and Carbon Black with Check Point solves four key security challenges:
•Prioritize alerts: Automatically correlate Check Point Threat Prevention network alerts with real-time endpoint sensor and recorder data to determine which alerts are actionable and prioritize them based on the number of systems infected.•Rapidly respond to alerts: Gain instant visibility into file execution events, file system modifications, registry changes, and unique binary execution data to understand if a malicious file executed, to locate every instance of the suspicious file across all endpoints and servers, and to accelerate incident response if required.•Prevent Attacks: Reduce the total threat surface with advanced, signature-less prevention policies to lock down high-risk endpoints, servers and fixed-function devices while leveraging the Check Point Threat Emulation Service to perform real-time analysis of suspicious files and immediately stop malicious software from executing on remaining endpoints and spreading throughout your enterprise.•Analyze Files: Submit files arriving on endpoints and servers automatically or on-demand to the Check Point Threat Emulation Service to quickly determine the risk of each file and whether it needs to be stopped.
"Check Point's network protection and threat emulation capabilities, combined with Bit9 and Carbon Black's advanced threat security and incident response solutions, will deliver complete end-to-end protection," said
Carbon Black's lightweight endpoint sensor and recorder capabilities for real-time firewall alert prioritization and response with Check Point are available today.
Integrations of the Bit9 Security Platform with the Check Point Next Generation Firewall and Check Point Threat Emulation Service are slated to become available in the first half of 2014. The ability to prioritize alerts, respond to alerts, and analyze files is available today; the ability to prevent attacks will be available in Q2.
Bit9 and Check Point will be hosting a joint webinar about their integrated capabilities on
The companies are exhibiting at the
About Bit9 + Carbon Black
Bit9 and Carbon Black have joined together to offer the industry's most complete solution for advanced threat protection for endpoints and servers. The merged company helps organizations protect themselves from advanced threats in two critical ways: by reducing their attack surface through new signature-less forms of prevention, and rapidly detecting and responding to threats. We do this by leveraging the powerful combination of Carbon Black's lightweight endpoint sensor, which can be rapidly deployed with no configuration to deliver "incident response in seconds," and Bit9's industry-leading prevention technologies to continuously monitor and record all activity on endpoints and servers and stop cyber threats that evade traditional security defenses. Our lightweight real-time sensor and recorder, cloud-based services, and real-time enforcement engine give organizations immediate visibility into everything running on their endpoints and servers; real-time signature-less detection of and protection against advanced threats; a recorded history of all endpoint and server activity to rapidly respond to alerts and incidents; and real-time integration with network security devices from companies such as Check Point Software Technologies.1,000 organizations worldwide—from 25 Fortune 100 companies to small businesses—use Bit9 and Carbon Black to increase security, reduce operational costs and improve compliance.