The Data Security Firewall uses an Advanced threat protection is a solution that helps keep zero-day and advanced threats away from entering an organization’s network. These threats are usually engineered to be disguised as good traffic and evade security measures used by the target organization. These can be a malicious file, URL or a constructed mail for well a planned attack.

GajShield’s Intelligent Sandboxing technique identifies malicious files and sandboxes it in a virtual environment, away from the organization’s network to traps the injected malware.

The ATP combined with advanced Machine Learning capability that finds outlier to identify suspicious traffic for further process by the security engines for preventing zero-day threats and keeping them away from the network. Today's viruses, Malwares, Worms and Trojans target the primary weakness in anti-virus technology: the time it takes for new signatures or heuristics to be developed and distributed. GajShield Next Generation firewall appliances, integrates Zero-Day Virus Outbreak Protection to shield enterprises in the earliest moments of malware outbreaks, and right through as new variants emerge.

GajShield zero-day protection overcomes the newer security issues witnessed, in which large quantities of Trojans and other viruses are being missed by traditional signature-based and heuristic antivirus engines increasing the risk for organizations.

Advantages:

Intelligent Sandboxing:

GajShield’s Intelligent Sandboxing service is a cloud-based sandbox designed to discover unknown threats such as ransomware at the gateway, by creating a virtual environment away from organization’s network and running the suspicious file to identify previously unseen malware and threats. It analyses executable programs (PE), JAR, APK, DLL, PDFs and MS Office files etc. (50+ types). It has support for multi-operating systems including Windows and Android. An organization can decide which files it would like to exclude from sandboxing based on file type, name, sender and recipient.

GajShield Threat Lab:

GajShield Threat Lab stores a database of all Proactive virus and malware detections, bad IP addresses, domains and URLs. At the GajShield Threat Lab, a database of real-time spam outbreaks is collected and compiled and maintained, through consultation with global Internet Service Providers. Patterns are analyzed, categorized, and cross-matched using algorithms, run to optimize the detection of repeating patterns and their sources. This database, containing approximately over six million signatures, is continuously updated with more than 30,000 new unique signatures added hourly. GajShield Threat Lab uses honeypots, sensors deployed across the internet which provides early warning of cyber attacks. Machine learning is used to crawl the internet to identify malicious sites. The cyber threat intelligence (Indicator of Compromise list) which consists of bad IP addresses, domains, URLs, file hash (md5/sha256), malware signatures, spam outbreak signatures which are generated by GajShield Threat Lab, is fed into each security component of GajShield NGFW. With the release of GajShield DSF Bulwark firmware, GajShield firewalls intelligently identify various attempts to compromise and alert the administrator in real time. Advance DSF engine monitors traffic in real time and using the IOC list is able to identify attempts to compromise database servers, unauthorised access to Windows or Linux servers, suspicious traffic or even attempts to leak data out of your network.  

Signature – Independent Protection:

Signature-independent protection is an essential complement to traditional AV technologies, security experts agree. By proactively scanning the Internet and identifying massive virus outbreaks as soon as they emerge, GajShield's Zero-Hour (Zero-Day) Solution provides just that: proactive virus blocking that is effective and signature-independent.

Gateway Defence:

GajShield Firewall sits at the gateway and acts as the first point of encounter to all cyber threats. Its proactive security helps in defending cyber-attacks, real-time. It deals with the threats at the gateway, keeping threats away from the organization’s network thus, maintaining a cleaner network environment.

Immediate:

GajShield provides enterprises with proactive virus detection they need to close the early-hour vulnerability gap during which millions of users are infected. GajShield's proactive virus detection capabilities ensure users' protection hours before signatures are released. 

Artificial Intelligence and Machine Learning:

AI and ML-based cybersecurity solutions will become a necessity in the future of cybersecurity as traditional means will become incapable of mitigating the risks posed by ever-evolving malware, hacks, and other types of cyber-attacks. AI-based self-learning applications will become a standard part of cybersecurity teams’ toolkits that will ensure continued protection against evolving risks.

Proven:

Robust and inherently immune to emerging foiling attempts, GajShield has a proven record of being one of the highest performings among proactive virus control solutions. GajShield's Zero-Hour Virus Outbreak Protection is powered by GajShield Threat Lab, which has a track record of protecting millions of users globally.

Features:

• Ransomware Protection
• Malware Protection
• Real-time inspection & protection from unknown threats through proactive/stream mode
• Deploy signatures to the firewall when a file is identified as malware
• Analyses archives like zip, tar, gzip, 7z, rar across all operating systems.
• Analyses many different malicious files irrespective of its size (executables, office documents, pdf files etc.) as well as malicious websites under various operating systems like Windows and Android.
• Trace API calls and general behaviour of the file and distil this into high-level information and signatures.
• Threat analysis on dashboard
• Analyse network traffic, even when encrypted with SSL/TLS.
• Perform advanced memory analysis of the infected virtualized system
• Recurrent Pattern Detection of unknown malware through emailing protocols
• Multiple spam classification
• Independent of Content, Format, Language
• Real-time Blacklist (RBL), MIME header checks
• Filter based on message header, size, sender, recipient, subject line tagging
• Zero hour Virus Outbreak Protection
• Anti-botnet security