Capture Advanced Threat Protection

Discover and stop zero-day and other unknown attacks

Capture ATP service stops unknown, zero-day attacks such as ransomware at the gateway with automated remediation. This cloud-based multi-engine sandbox analyzes suspicious code to help discover and block newly developed malware from entering your network.

Capture Advanced Threat Protection
SonicWall Capture Advanced Threat Protection service is a cloud-based multi-engine sandbox designed to discover and stop unknown, zero-day attacks such as ransomware at the gateway with automated remediation.

Stop Unknown Threats at the Gateway
- Extend firewall threat protection to detect and prevent zero-day attacks
- Send suspicious files to the Capture ATP Cloud for analysis
- Detect and block threats with Real-Time Deep Memory InspectionTM (RTDMI)
- Gain comprehensive visibility to malicious activity
- Resist evasion tactics and maximize zero-day threat detection

Analyze a broad range of file types
- Analyze executable programs (PE), DLL, PDFs, MS Office files, archives, JAR and APK
- Analyze multiple operating systems, including Windows and Android
- Include or exclude files for cloud analysis by type, size, sender, recipient or protocol
- Manually submit files to the cloud service for analysis

Block Until Verdict
- Prevent potentially malicious files from entering the network
- Hold files sent to the cloud service for analysis at the gateway until a verdict is determined
- Return a verdict quickly by processing files in parallel using multiple engines

Rapidly Deploy Remediation Signatures
- Get real-time protection from unknown threats
- Deploy signatures to the firewall immediately when a file is identified as malicious
- Prevent follow-on attacks

Gain Better Insight With Reports and Alerts
- Use the at-a-glance threat analysis dashboard and reports
- Get detailed analysis results for files sent to the service
- Receive notification of suspicious files sent to the Capture ATP service and file analysis verdict