Advanced Detection Parent topic

Deep Discovery Web Inspector advanced detection technology discovers targeted threats based on network objects, domain objects, URLs, and file types.
Deep Discovery Web Inspector uses multiple detection methods to ensure the highest level of protection, including:
  • Approved/Blocked list to determine which URLs, domains, server IP addresses, or file (SHA1) objects to allow or block without needing to scan
  • Untrusted server certificate analysis to detect whether the URL or domain has an untrusted SSL server certificate
  • Web Reputation Services database to block users from URLs that are known malicious sites
  • True file types that you select for inclusion in a policy to trigger a detection and then can take action based on the configured policy
  • Static Intelligence Engine's known pattern for detecting malware
  • Script Analyzer Lineup to detect malicious scripts
  • Advanced Threat Scan Engine for advanced detection of malware
  • Predictive Machine Learning for intelligent analysis of unknown threats
  • Virtual Analyzer sandbox for custom threat simulation analysis