WatchGuard APT Blocker is a new service available for all WatchGuard Unified Threat Management (UTM) and Next-Gen Firewall platforms. APT Blocker is one of the industry's most sophisticated platforms for detecting advanced persistent threats and zero day evasive malware.
Instead of focusing on signatures of known malware, WatchGuard APT Blocker focuses on behavior analysis to determine if a file is malicious. APT Blocker identifies and submits suspicious files to a cloud-based, next-generation sandbox, where code is analyzed, emulated, and virtually executed to determine its threat potential. WatchGuard APT Blocker's advanced malware analysis also uses machine-level emulation to detect advanced forms of evasion such as disabling security protocols, changing security settings or stealing passwords. APT Blocker's full-system emulation approach to sandboxing provides simple, rapid protection that scales to inspect millions of objects at any given time.