Skip to main content

GravityZone Business Security Premium (for Small Business Security)

GravityZone Business Security Premium combines an effective endpoint protection platform with incident analysis capabilities to help you defend endpoint infrastructure.

The GravityZone Business Security Premium product trial grants you access to the following features:

  • Web Access Control - allows you to manage web access for users or applications at specific times. Blocked web pages are not visible in the browser due to Web Access Control. Instead, a default web page appears, notifying the user that the requested web page has been blocked by Web Access Control.

  • Network Attack Defense - focuses on detecting network attacks designed to gain access on endpoints through specific techniques, such as: brute-force attacks, network exploits, password stealers, drive-by-download infection vectors, bots, and Trojans.

  • Endpoint Risk Analytics (ERA) - identifies, assesses, and remediates Windows endpoints weaknesses via security risk scans (on-demand or scheduled via policy), taking into account a vast number of indicators of risk.After scanning your network for indicators of risk, you will gain and overview of your network risk status through the Risk Management dashboard, available from the main menu. You will be able to resolve certain security risks automatically from GravityZone Control Center, and view recommendations for mitigating endpoint vulnerabilities.

  • Device Control - allows preventing the sensitive data leakage and malware infections via external devices attached to endpoints by applying blocking rules and exceptions via policy to a vast range of device types (such as USB flash drives, Bluetooth devices, CD/DVD players, storage devices, etc.).

  • HyperDetect - enhances the security measures by incorporating an additional layer of protection to the current scanning technologies such as On-Access, On-Demand, and Traffic Scan. This added layer is specifically designed to combat the latest forms of cyber-attacks, including advanced persistent threats.

  • Policy Assignment by Rules - enables you to define assignment rules for policies, for a specific location, user, or endpoints with certain tags. For example, you can apply more restrictive firewall rules if the user connects to the internet from outside the company or you can define different frequencies for on-demand tasks when outside the company.

  • Central scanning and Security Servers - provides you with an antimalware service dedicated for virtual machines propagated through central scan and a security server.

  • Sandbox Analyzer - the service is able to prevent unknown threats from executing on the endpoint. It operates in either monitoring or blocking mode, allowing or denying access to the suspicious file until a verdict is received. Sandbox Analyzer automatically resolves discovered threats according to the remediation actions defined in the security policy for the affected systems.

  • Security for Exchange - offers a comprehensive suite of security features, including antimalware, antispam, antiphishing, attachment and content filtering.

Start the trial

To start the trial, follow the steps below:

  1. Log in to GravityZone with your administrator account.

  2. Click the product_trials_icon_262792_en.png button on the upper right side of the console to access the In Product Trials page.

  3. Select Learn more under the GravityZone Business Security section.

  4. Select Start free trial.

Your company's licensing status will be updated to match your new product. You will be redirected the home page where you will see the new sections in GravityZone available to you.

Note

To revert to your previous license key, you can use the Stop Trial button. Learn more.

Configure and install the new features

Important

We recommend trying out the new features on a limited set of endpoints. This is most easily done by creating a new policy and applying it to the endpoints selected for testing.

To start using these new features, follow the steps below:

Preparing and deploying policies

  1. Go to the Policies page.

  2. You can either:

    • Create a new policy.

    • Edit one of your existing policies.

  3. Go to the Antimalware > Hyper Detect page, and select the Hyper Detect checkbox.

  4. Go to the Network protection page, and under Content control > Web access control, enable and configure the module.

  5. Under Network attacks > Network Attack Defense, enable and configure the module.

  6. Go to the Risk management page, and configure the module.

  7. Go to the Device control page, and configure the module.

  8. Go to the Sandbox Analyzer > Endpoint Sensor section, select the Automatic sample submission from managed endpoints check box and configure the module.

  9. Save your policy.

  10. If you created a new policy, apply it to the endpoints you want to test it on.

    If you edited an existing policy, the changes will take place on all endpoints it was applied to.

This will allow you to enable the newly available features on all selected endpoints.

Creating a reconfigure client task to deploy the EDR module

  1. Go to the Network page and select the endpoints you wish to deploy the module on.

  2. Click the Tasks button and select Reconfigure client.

  3. Under Modules select Add and enable:

    • Network Protection > Content Control and Network Attack Defense

    • Device Control

    Note

    For more information on using the Reconfigure client task refer to Reconfigure agent.

  4. Click Save.

    The task will now deploy the EDR sensor on all selected endpoints.

Configure Sandbox Analyzer

  1. Read the information in this article.

  2. Configure the feature.

Configure Central Scanning

  1. Read the information in this article.

  2. Configure the feature.

Test out the new features

Submit a file to Sandbox Analyzer

You can manually submit a specific file or URL to be scanned by the Sandbox analyzer engines by following these steps.

Note

You can download several samples to test out using this link.

You can check the results of the scan on the bottom of the Sandbox Analyzer page. Learn more

View Network Attack Defense activity

You can use this feature to protect your network against specific network attack techniques, such as Initial Access, Block Credential Access, Block Discovery, Block Lateral Movement, or Block Crimeware.

You can configure the feature to take one of two actions once such an attack is detected:

  • Block - Network Attack Defense stops the attack attempt once detected.

  • Report Only - Network Attack Defense informs you about the detected attack attempt, but it will not try to stop it.

Test out the Antimalware feature on endpoints with Central Scanning

  1. Go to the Policies page.

  2. Select one of the policies you are using and click Clone Policy.

  3. Click on the new policy to edit it, go to Antimalware > On-Access, and make sure On-access Scanning is disabled.

  4. Save the policy.

  5. Apply the policy to one of your endpoints where you want to test the feature.

  6. Create a test folder on your endpoint.

  7. In the test folder create a .txt file called eicar.com and paste in the following line:

    X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

  8. Save the file.

  9. Create a scan task:

    1. Go to the Network page and select the endpoints you want to run the scan.

    2. Click the Tasks button in the upper side of the page.

    3. Select Malware scan.

      Note

      For more information, refer to Malware scan

    4. Under Type select Custom Scan.

    5. Go to the Target tab and add the path of the test folder you created earlier.

    6. Click Save.

The Antimalware On-Access protection feature will automatically detect the EICAR file and move it to quarantine.

Important

Once done testing, re-apply the original policy to the endpoint you used for testing.

Stop the trial

To stop the trial, follow the steps below:

  1. Log in to GravityZone with your administrator account.

  2. Click the product_trials_icon_262792_en.png button on the upper right side of the console to access the In Product Trials page.

  3. Select Learn more under the GravityZone Business Security Premium section.

  4. Select Stop trial.

Your company's licensing will revert to the previous state and all additional features will be disabled.

In this section: