Reply to thread

Message

<blockquote data-quote="Trident" data-source="post: 1046590" data-attributes="member: 99014">[USER=92939]@Shadowra[/USER] will be unable to test DI against phishing because DI does not include any anti-phishing or other network filtering components.Threat emulation is not technology from yesterday, in fact Content Disarm and Reconstruction (patented by Check Point) and Threat Emulation are now deemed necessity, the second most important components on a business environment after Next Generation Firewall.The Check Point threat emulation does not analyse large files and as a general rule, malware is not a large file. Large files must be trusted software installers (such as MS Office, Adobe Photoshop and others). Thousands of developers within these companies work for years and this is how the large file is born. Malware has just very few capabilities hence it is small.Malware can be artificially inflated and packed with garbage!In that case other components will block it, emulation is not the be-all end-all in Harmony.Also, threat emulation can be configured to deliver the file instantly and then remove it later on if it turns out to be malicious. Documents are always delivered instantly in a sanitised format (businesses operate mostly with documents). Even if users will have to wait, 5 minutes spent waiting on emulation are nothing compared to what will happen if all machines experience a ransomware attack - there will be days, sometimes months of downtime and employees will work with flying papers and pen. And under the GDPR a EUR 25 Million or 4% of last year&#039;s turnover (whichever is greater) + the loss of business, customers and trust will be the consequence.So, wanna wait 5 minutes or you prefer to open everything with full speed?</blockquote>

[QUOTE="Trident, post: 1046590, member: 99014"] [USER=92939]@Shadowra[/USER] will be unable to test DI against phishing because DI does not include any anti-phishing or other network filtering components. Threat emulation is not technology from yesterday, in fact Content Disarm and Reconstruction (patented by Check Point) and Threat Emulation are now deemed necessity, the second most important components on a business environment after Next Generation Firewall. The Check Point threat emulation does not analyse large files and as a general rule, malware is not a large file. Large files must be trusted software installers (such as MS Office, Adobe Photoshop and others). Thousands of developers within these companies work for years and this is how the large file is born. Malware has just very few capabilities hence it is small. Malware can be artificially inflated and packed with garbage! In that case other components will block it, emulation is not the be-all end-all in Harmony. Also, threat emulation can be configured to deliver the file instantly and then remove it later on if it turns out to be malicious. Documents are always delivered instantly in a sanitised format (businesses operate mostly with documents). Even if users will have to wait, 5 minutes spent waiting on emulation are nothing compared to what will happen if all machines experience a ransomware attack - there will be days, sometimes months of downtime and employees will work with flying papers and pen. And under the GDPR a EUR 25 Million or 4% of last year's turnover (whichever is greater) + the loss of business, customers and trust will be the consequence. So, wanna wait 5 minutes or you prefer to open everything with full speed? [/QUOTE]

Verification