topic Re: SANDBLAST in General Topics

SANDBLAST

Alex_Rozhko — Sun, 01 Apr 2018 04:36:01 GMT

I found only few blogs about this "solution"? Anyone from CheckMates members use it? Can you share your experience?

Re: SANDBLAST

Jesús_Toledano — Sun, 01 Apr 2018 11:13:28 GMT

Hi Alex, as you probably know Sandblast is a product family. Currently Sandblast has these line of products:

Sandblast Network. It's our sandboxing (Threat Emulation) solution for mail and web traffic. It can be done in the cloud or on-premise with a TE appliance. It doesn't require a Check Point Firewall. It also include the blade Threat Extraction.
Sandblast Agent. It's a group of advanced threat protections that were add to the Endpoint Complete Suite. It can be deployed alone or within the Endpoint complete package. Currently includes these features:
- Anti-Exploit.
- Anti-Bot.
- Anti-Ransomware.
- Forensics.
- Threat-Emulation.
- Threat-Extraction.
- Zero-Phishing.
Sandblast API. Sandblast can be deployed through an API for example to do clean pipes.
Sandblast Mobile. It's the solution for mobile devices. It includes protections for:
- OS exploits
- Network Attacks (MiTM)
- Malicious Applications
- Bluetooth Attacks (Blueborne)
- SS7 Attacks
- Network Filter (In roadmap)

In Check Mates there are different use cases for the different solutions. If you are more specific about what you are looking for we could help you better.

HTH,

Jesús

Re: SANDBLAST

HeikoAnkenbrand — Mon, 02 Apr 2018 07:21:21 GMT

See All Products and Where To Post About Them. Here you can find an overview of Sandblast chapters.

Re: SANDBLAST

Alex_Rozhko — Tue, 03 Apr 2018 01:39:12 GMT

J, you do not mention SB cloud?

Sent from my iPhone

Re: SANDBLAST

Jesús_Toledano — Tue, 03 Apr 2018 05:27:29 GMT

You’re right, it’s because the solution had a rebranding to CloudGuard SaaS 🙂

Re: SANDBLAST

Alex_Rozhko — Sat, 21 Apr 2018 05:54:59 GMT

Thank you J. Which of the solutions from SandBlast family utilize CPU-level threat prevention?

Re: SANDBLAST

Pablo_Barriga — Fri, 27 Apr 2018 17:36:07 GMT

I think all this product use the ROP analysis

Sandblast Agent

Sandblast Network

CloudGuard SaaS

Sandblast API

Sandblast Mobile I'm not sure if can inspect CPU exploits.