Overview
NPAV EDR provides an intelligent endpoint firewall and encrypted traffic inspection capabilities to protect endpoints from unauthorized network communication and advanced cyber threats. Administrators can define granular network security policies to control application access, regulate network traffic, and inspect encrypted communications for malicious content.
Intelligent Firewall Protection
NPAV EDR includes a policy-driven firewall that monitors and controls inbound and outbound network traffic based on predefined security rules. The firewall enables administrators to enforce application-aware network policies and restrict unauthorized communications.
Key capabilities include:
- Block or allow network activity based on application categories.
- Control inbound and outbound network traffic.
- Create rules based on IP addresses, ports, and network protocols.
- Configure traffic direction (Inbound, Outbound, or Both).
- Restrict unauthorized application network access.
- Centrally manage firewall policies through the NPAV EDR Management Console.
These capabilities help reduce the attack surface by preventing unauthorized applications from communicating over the network.
Encrypted Traffic Inspection
NPAV EDR provides dedicated capabilities to inspect and scan encrypted network communications, including SSL/TLS traffic, to identify hidden threats that may be delivered through secure channels.
The solution inspects encrypted traffic to detect:
- Malware and malicious payloads
- Phishing websites and malicious URLs
- Command-and-Control (C2) communications
- Suspicious downloads
- Ransomware-related network activity
- Other encrypted cyber threats
By inspecting encrypted communications, NPAV EDR helps organizations detect and block threats that attempt to evade traditional security controls by using encrypted connections.
Key Benefits
- Application-aware firewall with granular policy control.
- Control network traffic based on application, protocol, IP address, port, and traffic direction.
- Centralized firewall policy management.
- Inspection of encrypted SSL/TLS communications.
- Detection of threats hidden within encrypted traffic.
- Enhanced protection against malware, phishing, ransomware, and command-and-control communications.
- Centralized monitoring and reporting through the NPAV EDR Management Console.
