ICSA Labs Advanced Threat Defense – Report-at-a-Glance
During 32 days of testing during the first quarter of 2022, ICSA Labs tested the detection capabilities of SonicWall’s advanced threat defense solution, SonicWall Capture Advanced Threat Protection (ATP), with a mix of 1,131 test runs. The mix was primarily composed of new and little-known malicious threats – i.e., recently harvested threats not detected by traditional security products.
During 32 days of testing during the first quarter of 2022, ICSA Labs tested the detection capabilities of SonicWall’s advanced threat defense solution, SonicWall Capture Advanced Threat Protection (ATP), with a mix of 1,131 test runs. The mix was primarily composed of new and little-known malicious threats – i.e., recently harvested threats not detected by traditional security products.
Periodically, ICSA Labs launched innocuous applications and activities to additionally test SonicWall Capture ATP in terms of false positives. Throughout testing, ICSA Labs observed product logs to ensure not only that SonicWall Capture ATP indicated the existence of a malicious threat but also that logged threats were distinguishable from other logged traffic and events.
SonicWall Capture ATP passed, having met all criteria requirements. As seen in Figure 1 below, SonicWall Capture ATP did remarkably well during this test cycle - detecting 100% of previously unknown threats while having zero false positives. Figures 2 and 3 below further highlight the solution’s detection effectiveness and false positives (FPs).
This report reflects the results of one test cycle at ICSA Labs. Standard ATD and ATD-Email test cycles are performed by ICSA Labs each calendar quarter and typically range from three to five weeks in duration. To be eligible for certification, security vendor solutions must be tested for at least 3 weeks. Because testing is performed quarterly, ICSA Labs tests ATD solutions four times during a calendar year.
During each test cycle ICSA Labs subjects advanced threat defense solutions to hundreds of test runs. The test set is comprised of a mix of new threats, little-known threats and innocuous applications and activities – delivered and launched one after another continuously for the length of testing. Below in Figure 4 is information about the test cycle from which this findings report is based.
Para el ver artículo original: https://www.sonicwall.com/medialibrary/en/white-paper/icsa-q1-2022-advanced-threat-defense-atd-certification-testing-report.pdf
Últimos Artículos
