ENDPOINT SECURITY
Your firewall protects the network, but laptops, desktops and servers are often where an attack actually starts. SonicWall’s endpoint protection stops ransomware, malware and fileless attacks on each device, wherever your users are working. There are two product families, so you can choose the protection and level of management that suits your business.
SonicWall Endpoint Security
This is SonicWall’s newest endpoint platform, built for managed service providers and small to mid-sized businesses. A single lightweight agent combines next-generation antivirus (NGAV) with endpoint detection and response (EDR), managed from a multi-tenant cloud console. It includes automated threat response, one-click ransomware rollback, device control and integration with SIEM and ticketing tools. It comes in three tiers:
- Advanced: core NGAV and EDR protection with live threat hunting.
- Premier: adds historical threat hunting and 30-day EDR telemetry retention for deeper forensic investigation.
- SonicSentry MDR: a fully managed service from SonicWall’s 24x7x365 security operations centre, including managed threat hunting, incident response and policy management.
SonicWall Capture Client
Capture Client is SonicWall’s established endpoint security platform. It uses a next-generation anti-malware engine powered by SentinelOne, with behaviour-based protection, Capture ATP sandboxing and automatic rollback to a safe state after an attack. It is managed through the Capture Security Center and works alongside SonicWall firewalls, including DPI-SSL certificate deployment. It comes in Advanced and Premier editions, and Premier adds deeper threat hunting and remote shell access.
