BITDEFENDER SANDBOX ANALYZER ON-PREMISES

Automated submission. AI-powered detection. Integrated response

Next-generation AI-powered sandbox with advanced detection, reporting & attack visibility.

Bitdefender Sandbox Analyzer is a security solution that enhances the organization posture against sophisticated or targeted attacks through advanced detection and reporting capabilities of elusive, persistent threats that try to penetrate your network.

Delivered as a virtual appliance on-premises, the solution can integrate into your existing security architecture or combine with additional Bitdefender security layers, and can effortlessly scale up as your infrastructure evolves. read less read more

Delivered as a virtual appliance on-premises, the solution can integrate into your existing security architecture or combine with additional Bitdefender security layers, and can effortlessly scale up as your infrastructure evolves.

Advanced detection and visibility

Combines in-house threat intelligence streams with proprietary machine learning and behavioral detection for maximum, real-time accuracy.

Displays interactive visualization graphs of security incidents for in-depth forensics.

Detects very sophisticated, custom-built threats targeting specific environments through golden image support.

Compliant and effective

Prevention and detection are performed fully on-premises, with no files sent for scanning outside your network.

Leverages AI and Bitdefender threat intelligence built from over 500 million users worldwide, to maintain accurate real-time detection on a local level.

Reveals most advanced and evasive type of malware like APTs or C2s by incorporating anti-evasion and anti-fingerprint technologies.

Integrated, automated, scalable

To blend in the security architecture, it integrates natively with Bitdefender technologies and through API’s with other security elements.

Automates the process of selecting and sending files for sandbox execution and enables autonomous response.

Ran as a virtual appliance, it can be easily scaled to support increasing streams of data.

Features and benefits

Powered by AI, behavioral analytics and threat intelligence

A next-gen sandbox solution, Bitdefender Sandbox Analyzer On-Premises features state of the art machine learning, neural networks and behavioral analytics ensure quick and accurate containment.

Built and perfected in-house

Instead of incorporating third-party technologies, which can become discontinued or outdated in time, Bitdefender Sandbox Analyzer On-Premises is built entirely on proprietary Bitdefender technologies and also leverages Bitdefender Advanced Threat Intelligence

Vertical and horizontal scalability

Ran as a virtual appliance, Bitdefender Sandbox Analyzer can easily scale up to support increasing streams of data that can be supported by the dedicated hardware host. Virtually unlimited scalability can be achieved by increasing the number of sandbox instances while maintaining a centralized management of the entire sandbox network under a single console (GravityZone).

Integrates with the security architecture in-place

The on-premises sandbox integrates natively with GravityZone and, through API’s, ensures broad integration with with 3rd party security solutions. The integration into the security architecture not only automates the submission of file but also enables autonomous response in case threats are detected.

Detailed visualization & reporting tools

Bitdefender Sandbox Analyzer features a uniquely comprehensive and elegant visualization chart, which delivers a complete view of each detection and its underlying context. It can learn the threat behavior and provide timeline display of the changes it is trying to make to the system, tree graphs, and even a screenshot of the message or error the user views as it is infected – such as the ransomware note.

Extended file support & tunable throughput

Bitdefender extends the range of file supported by the sandbox to make the solution effective against a wide range of attack vectors, including malicious applications, document, archives, emails and scripts.

Automatic content selection and submission of files

The solution incorporates a mechanism that singles out suspicious files and eliminates redundant scanning, ensuring that only unknown, relevant files are submitted for analysis. The automatic submission of files is enabled by the built-in network sensors, ICAP protocol support, and through the integration with GravityZone: automatic submission from the endpoint agent or from the central quarantine.

Custom VM image support to replicate real-life configurations

Multiple golden image support enables admins to emulate different configurations on the sandbox instances, from production to executive golden image configurations, ensuring that any attack that may manifest on your specific configurations or apps will be detected in advance.

Want to learn more?

DOWNLOAD DATASHEET

Architecture

Sandbox Analyzer On-Premises Datasheet