Trend Micro Deep Discovery Analyzer
Enhanced protection against targeted attacks
Overview:
Prevent Data Breaches
Deep Discovery Analyzer is a turnkey appliance that uses virtual images of endpoint configurations to analyze and detect targeted attacks. It uses an XGen™ security blend of cross-generational detection techniques applied at the right place and time to detect targeted attacks that are designed to evade standard security solutions.
Extend the value of your security
Many organizations have invested lots of money to deploy security solutions such as next gen firewalls, IPS, endpoint security, and security gateways. Unfortunately, targeted attacks are designed to bypass these solutions. Deep Discovery Analyzer bridges solutions that provide security for known threats with protection from unknown threats, and shares threat information back to these solutions.
Detect targeted ransomware
Organizations are increasingly becoming victims of targeted ransomware when advanced malware gets around traditional security, encrypts data, and demands payment to release the data. Deep Discovery Analyzer uses known and unknown patterns and reputation analysis to detect the latest ransomware attacks, including WannaCry. The customized sandbox detects mass file modifications, encryption behavior, and modifications to backup and restore processes.
Reduce costs
The Deep Discovery Analyzer Appliance extends the value of existing security and speeds up the time to detect and remediate targeted attacks. Incident response time is reduced and costs of remediation are lowered.
Features:
Extensive detection techniques
Trend Micro™ Deep Discovery™ Analyzer uses XGen™ security, a blend of cross-generational techniques to ensure the highest detection rate with the lowest false positives:
- Web filtering with URL reputation
- Local content correlated with comprehensive threat intelligence
- Lateral movement detection
- Custom Sandbox Analysis
- Behavioral analysis
- Machine-learning optimized relevance pattern for detecting command-and-control (C&C) behavior
Custom sandboxing
Custom sandboxes use virtual images to match your operating system configurations,
drivers, installed applications, and language versions. Difficult for hackers to evade, they
include a “safe live mode” to analyze multi-stage downloads, URLs, C&C, and more.
Sandboxing can be used as further sandboxing capacity for other Deep Discovery
appliances, or as a scalable stand-alone sandbox. Manual submission allows
administrators to investigate suspicious objects.
Optimized and connected
- A single appliance can support up to three different virtual images and a total of 60 sandboxes
- Can be configured as a stand-alone sandboxing solution or as additional capacity for an existing solution
- Appliances can be clustered for scalability and redundancy
- Integration with popular SIEMs, such as HP Arcsight, IBM QRadar, and Splunk
Centralized visibility and control
Deep Discovery Analyzer is managed with a centralized management platform, Trend Micro Control Manager, which provides a holistic view of your security posture across all Trend Micro security solutions, and can share threat updates with your existing security platforms. Deep Discovery offers custom image management and control across multiple Deep Discovery systems.
Specifications:
| Hardware Model 1100 | |
|---|---|
| Capacity | 45,000 samples/day |
| Supported File Types | cell, chm, class, dll, doc, docx, exe, gul, hwp, hwpx, jar, js, jse, jtd, lnk, mov, pdf, ppt, pptx, ps1, rtf, swf, vbs, vbe, xls, xlsx, xml |
| Supported Operating Systems | Windows XP, Win7, Win8/8.1, Win 10, Windows Server 2003, 2008, 2012, Mac OS |
| Form Factor | 2U Rack-Mount, 48.26 cm (19") |
| Weight | 32.5kg (71.65lbs) |
| Dimensions | Width 48.2cm (18.98”) x Depth 75.58cm (29.75”) x Height 8.73cm (3.44”) |
| Management Ports | 10/100/1000 Base-T RJ45 Port x 1 |
| Data Ports | 10/100/1000 Base-T RJ45 x 3 |
| AC Input Voltage | 100 to 240 VAC |
| AC Input Current | 10A to 5A |
| Hard Drives | 2 x 4 TB 3.5 inch SATA |
| RAID Configuration | RAID 1 |
| Power Supply | 750W Redundant |
| Power Consumption (Max.) | 847W (Max.) |
| Heat | 2891 BTU/hr (Max.) |
| Frequency | 50/60 Hz |
| Operating Temp. | 50-95 °F (10 to 35 °C) |
| Hardware Warranty | 3 Years |