According to long-term observation of RapidRX Labs, webpage, email, FTP top the ways of malware distribution and information returning. Driven by taken profit, malwares are massively generated with shorter life span, faster speed, and more dynamic code. To protect enterprises against known malware variants as well as unknown malwares, Anchiva leverage following filtering and scanning technology and relevant processes and services.

 

Anchiva support content scanning to five common protocol traffic: Http, Smtp, Pop3, Ftp, Https to conduct accurate inspection and blocking to potential malwares they contain. The content scanning covers various types of email code, webpage content and related JavaScript/VBScript to effectively prevent webpage Trojans and malwares uploading and downloading. It filters all kinds of files and familiar compressed files, filters and blocks malware hid in the encrypted https traffic, and support malware scanning and blocking to  non-standard port and self-define port of Http, https, FTP, SMTP, POP3 protocols.  

 

Anchiva's proprietary high performance ASIC-based malware scanning offer a performance several times of traditional structure, breaking performance bottleneck of secure web gateway. By passing ICSA performance certificate in 2007 Anchiva proved its highest performance with HTTP exceeding 800M which now has become GE in single device.

 

With highest performance, Anchiva secure web gateway offer users a super on-board signature database containing over 200,000,000 signatures. 6 times of daily updates enable Anchiva SWG to detect millions of malwares and pass ICSA anti-virus certification (refer to http://www.icsalabs.org/icsa/product.php?tid=dfgdf$gdhkkjk-kkkk .)

 

Normal signature matching is far from enough to detect polymorphic malwares. Anchiva Heuristic Pattern Recognition Inspection extract genetic mathematical characteristics of malware families, making it possible to detect large quantity of unknown malware variants sharing the same polymorphic mechanics, enhance the detection rate to these kind of malwares.

 

Anchiva scan engine judges and marks degree of risk of a file by analyzing its file head, code charateristics, distribution channel, and malicious behaviors to recognize latest unknown risky softwares.

 

It's a complement to content scanning, mainly used to:

      -filter and block malware origin

      -prevent spyware returning

      -prevent phishing

      -prevent backdoor infected computers being remotely controlled

      -malware filter malware ed downloaded in partitions

 

Anchiva heuristic inspection detect suspicious requests and submit to zero-day threat center of Anchiva security labs. Newly determined threats will be distributed to users via updates to protect Anchiva user networks from malicious attacks.

 

Anchiva has its own RapidRX Security Labs worldwide in North America, Europe and Asia-Pacific, engaging top experienced network threat analysts and researchers around the world. Anchiva possess collecting network, threat processing center, and threat scanning and inspecting technology, and by ASDN provide 24-hour¡¯s upgrading services to ensure user networks protected by latest technology. Anchiva provide two hours response to especially harmful virus samples, so as to provide customers zero-day protection.

 

Anchiva has its own RapidRX Labs worldwide in North America, Europe and Asia-Pacific, engaging top experienced network threat analysts and researchers around the world. With the membership of Wildlist, a world authorization in anti-virus research, the labs serve as Anchiva global anti-virus research center, Anchiva product support center as well as the backbone of Anchiva security service infrastructure. It has professional virus research centers and sample collecting networks in Asia-Pacific, North America and Europe, providing all-day anti-virus services for worldwide users.

 

Besides anti-virus, Anchiva secure web gateways integrate funtions such as internet application control and filtering, web application firewall to help users enhance internet security and management. A better performance will be achieved to combine these features.