Email Malware Protection System
Stopping Spear Phishing Attacks To Prevent Malware-induced Data Theft
The FireEye Email Malware Protection System (MPS) protects organizations from targeted email attacks, often called spear phishing. Targeted email attacks are increasingly e¬ffective as more and more user-speci c information is publicly available on social networks and on the Internet. The savviest users can be fooled into clicking on a URL or opening up an attachment. Without the user taking any other action, the PC is then compromised and entered into the Modern Malware infection cycle. While antispam systems and gateway antivirus fi lter out nuisance emails and known malicious attachments, today’s spear phishing emails easily bypass their signatures, coarse grain heuristics, and reputation analyses. This exposes users to “drive-by downloads” of malicious code and malicious attachments like PDFs with embedded exploit code.
FireEye Email security appliances are designed support a range of organizations accomodating large, global enterprises as well as small and medium enterprises. FireEye offers several unique benefits:
- Real-time Email Attachment & URL analysis - evaluates email attachments for zero-hour malware using virtual machines that run a crossmatrix of operating systems and applications, such as various web browsers and plug-ins.
- Real-time detection of zero-hour, targeted attacks - The Malware-VM filter features a multi-phase analysis using aggressive capture heuristics and deterministic virtual machine confirmation to eliminate false positives
- Spear Phishing Attack Correlation Across Web & Email - The Email MPS is integrated with the FireEye Web MPS and CMS to o¬ffer security across Web and email attack vectors. In addition, the integration with the Web MPS and CMS enables attack correlation so that Web-based attacks can be traced back to the original spear phishing email.
Web Malware Protection System
Stopping Zero-day Attacks and Malware Callbacks To Inoculate Networks From Cyber Intrusions
FireEye Malware Protection System (MPS) network security appliances prevent signature-evading Modern Malware from successfully gaining a foothold in the network and exfiltrating sensitive organizational data. FireEye MPS appliances operate
in-line, using fast-path blocking to stop known inbound attacks and malware callbacks coupled with dynamic, real-time Malware-VM™ and Malware-Callback™ analysis filters to accurately detect zero-hour attacks and halt their spread and negate their ability to steal data resources.
The MPS Series of Internet security gateways deploy within minutes in an organization's environment for malware analysis and threat prevention. Each appliance features a local graphical user interface management system, and can be optionally configured to connect to the FireEye Central Management System.
FireEye security appliances are designed support a range of network egress bandwidths accomodating large, global enterprises as well as small and medium enterprises. FireEye offers several unique benefits:
- Integrated Inbound & Outbound Blocking - Fast-path blocking of known attacks and malware callbacks is coupled with real-time Malware-VM and Malware-Callback analysis filters
- Real-time detection of zero-hour, targeted attacks - The Malware-VM filter features a multi-phase analysis using aggressive capture heuristics and deterministic virtual machine confirmation to eliminate false positives
- Outbound callback blocking - The Malware-Callback filter uses fine-grained, local and global malware intelligence to terminate data theft transmissions
- Multi-protocol protection - By analyzing traffic across protocols, FireEye can disrupt sophisticated malware, like Trojans, bots, worms, and rootkits, during all stages of the infection lifecycle: Initial exploit, Payload staging and installation, Network and System reconnaissance, and Data exfiltration.


