New FireEye Cloud Tools Boost Protection For All Assets, Workloads

FireEye’s new capabilities will allow businesses to protect the assets and workflows they’re running in the cloud, to identify advanced attacks that got past traditional or poorly integrated defenses.

FireEye has extended its threat detection and protection capabilities through a cloud-based architecture to defend increasingly complex hybrid security environments.

The Milpitas, Calif.-based platform security vendor said its new FireEye Cloud Security Solution provides scalable detection, centralized visibility, configuration monitoring, and user behavior analytics across complex multi-cloud infrastructure. This makes it possible for businesses to identify advanced attacks that got past traditional or poorly integrated defenses, according to FireEye.

“Our best-in-class threat detection, intelligence, and protection are now accessible to our customers from any location, whether they’re in the cloud or a hybrid environment,” FireEye Executive Vice President of Products and Customer Success Grady Summers said in a statement.

[Related: FireEye Mulls Sale To Private Equity Firm, Hires Goldman Sachs: Report]

Organizations too often lack the controls and expertise necessary to extend their visibility and protection across multi-cloud infrastructure, according to FireEye. But FireEye said its new capabilities will allow businesses to protect the assets and workflows they’re running in the cloud and deliver protection for inline, passive, on-premise, hybrid and virtual deployment scenarios.

The FireEye Cloud Security Solution capabilities are accessible through Detection On Demand, enhancements to the FireEye Helix security operations platform, new cloud versions of FireEye network security, and a new secure web gateway offering with iboss. More than half the breaches FireEye responds to involve cloud infrastructure, according to the company.

FireEye Detection on demand is a cloud-native service that provides a flexible and easy way to pinpoint file-borne threats. The tool uses insights gained from FireEye Threat Intelligence Experts to deliver detailed information on why a particular piece of content has been flagged as malicious, according to the company.

As a result, FireEye said businesses will find themselves in the strongest possible position to remediate malicious content. Detection on Demand can be integrated into custom application, utilized in third-party technology or used on a standalone basis, according to the company.

“We’re also making our threat detection available to third-parties to aid in the creation of custom web apps, as no two organizations paths to the cloud are paved the same,” Summers said in the statement

Meanwhile, a new data analytics rule pack powered by Mandiant will detect abnormal attacker behavior and unique threats to Amazon Web Services and Microsoft Office 365, FireEye said. Those capabilities are augmented via the Helix security operations platform to provide insights from leading FireEye threat intelligence, according to the company.

By working together, FireEye said the tools are able to detect prevalent cloud security challenges such as cloud misconfigurations, credential misuse, and password spray attacks, as well as abnormal admin activity and geographic infeasibility. FireEye Helix is also now offering users single-click onboarding as well as multitenancy capabilities, the company said.

As far as partnerships are concerned, the company said making FireEye Virtual Network Security available through AWS will allow customers to extend existing defenses into their cloud data centers while simultaneously adding new, server-focused protections to their workloads.

Meanwhile, the iboss and FireEye Cloud Network Security partnership will provide customers with advanced threat protection and breach detection to more effectively protect end traffic, users, devices, networks, assets, and data from known and unknown threats, according to FireEye.

Virtually all the enterprises supported by BAI have a hybrid cloud strategy regardless of vertical, and the Annapolis, Md.-based solution provider needs to be able to provide its clients with protection and detection regardless of where their IT footprint resides, according to Managing Partner Ryan Morris.

FireEye’s cloud security release is very much in line with the company’s continued effort to broaden its portfolio in ways that more tightly align it with other OEMs and vendors, Morris said. He expects the ability to work with other vendors will be a major continued area of focus for FireEye going forward.

“With or without security, enterprises are moving to cloud or hybrid cloud scenarios,” Morris told CRN. “It is imperative that products provide equal amounts of detection and protection regardless of where they’re hosted.”