Proofpoint Zero-Hour Anti-Virus Proofpoint Zero-Hour Anti-Virus protects enterprises against new viruses and other forms of malicious code during the critical first hours before anti-virus signatures have been updated-and adds an additional layer of anti-virus protection to your gateway defenses.
Placer County Office of Education uses Proofpoint Zero-Hour Anti-Virus as part of their "single, comprehensive system" to protect against both inbound and outbound messaging threats.
Global analysis, local protectionTo protect large organizations from emerging virus attacks, Proofpoint Zero-Hour Anti-Virus software combines global analysis of internet traffic patterns with local containment of suspicious messages and attachments. Proofpoint Zero-Hour Anti-Virus constantly analyzes millions of internet messages for anomalies that indicate a potential virus attack. Advanced pattern recognition technology is used to identify new viruses within minutes of their mass distribution over the internet with greater than 95% accuracy. At the customer's site, Proofpoint Zero-Hour Anti-Virus analyzes incoming messages for similarities with suspected virus messages. Messages and attachments that exhibit recurrent pattern characteristics of the emerging virus are automatically quarantined at the enterprise gateway where they can be held until the availability of a production-ready virus signature. Closing the zero-hour gapNew virus distribution methods designed to thwart signature-based anti-virus technology—including "short span" attacks, serial variant attacks and attacks launched from botnets—are on the rise. Today's enterprise needs protection that can respond almost instantaneously to emerging threats. Proofpoint Zero-Hour Anti-Virus identifies new virus activity and takes preventive action at the earliest stages of a virus outbreak, keeping your messaging systems safe until new anti-virus signatures are updated. Proofpoint's solution provides protection from viruses hours before competing "outbreak filters" react. Precise detection, minimal disruptionUnlike other virus outbreak solutions, Proofpoint Zero-Hour Anti-Virus software accurately detects and quarantines only those messages associated with an emerging virus, without stopping legitimate email. Instead of quarantining all email with attachment types deemed to be dangerous, Proofpoint's solution temporarily delays only specific messages that are classified as being part of an emerging outbreak. Customizable policiesProofpoint customers can easily customize their zero-hour anti-virus policies using the Proofpoint Messaging Security Console™, a convenient graphical user interface to all Proofpoint policy management, system administration and reporting features. Based on these flexible, customer-configurable policies, messages identified as part of a virus outbreak can be automatically re-scanned and cleaned, deleted, released or otherwise disposed of based on the availability of updated virus signatures and other conditions. Comprehensive reportingLike all of Proofpoint's modular messaging defenses, Proofpoint Zero-Hour Anti-Virus includes integrated reports that provide a complete view into the operation of your zero-hour defenses and virus activity in general. Built-in, graphical reports provide visibility into the volume of messages being classified by Zero-Hour policies, Zero-Hour virus trends, top Zero-Hour virus types including unverified messages, and verified virus volume trends-allowing you to quickly show ROI for your anti-virus initiatives. Flexible policy management and message dispositionProofpoint Zero-Hour Anti-Virus works in conjunction with the Proofpoint Virus Protection module to provide comprehensive defense against viruses. Together, these modules provide a proactive virus protection layer (that does not depend on signatures) and a fast and effective signature/heuristics engine to efficiently verify malicious code. Proofpoint Zero-Hour Anti-Virus software works right out of the box with pre-configured, default policies designed to address the virus outbreak defense needs of most organizations. But Proofpoint's easy-to-use graphical interface also gives you fine-grained control over every aspect of your Zero-Hour policies.
Zero-Hour Anti-Virus in ActionProofpoint Zero-Hour Anti-Virus works in concert with other Proofpoint defenses to provide nearly impenetrable defense against viruses, worms and other forms of malicious code. Incoming messages are processed by a variety of defensive systems that allow only legitimate messages into your enterprise. Messages are first scanned for validity and other policy violations. They are then scanned by Proofpoint's signature-based anti-virus defenses. Zero-Hour scanningMessages that are declared clean by the signature-based anti-virus filters are then passed to the Zero-Hour Anti-Virus module to determine if the message is part of a recent outbreak for which a traditional signatures are not yet available:
Zero-Hour quarantineSuspect messages are assigned a severity (confirmed virus, high, or medium risk) and different policies may be triggered based on this risk level or other message attributes. Typically, suspect messages will be sent to a Zero-Hour quarantine where they are held for a designated time (e.g., until two anti-virus signature updates are received), then the message is resubmitted to Proofpoint Virus Protection for rescanning. Comprehensive Virus ProtectionProofpoint understands that an effective defense against today's virus threats requires more than just signature-based protection or outbreak filters. Proofpoint provides comprehensive protection from malicious code through a combination of technologies and information services. Proofpoint Zero-Hour Anti-Virus ModuleProvides immediate protection from emerging viruses, powered by advanced pattern recognition technology from Commtouch. Our solution offers:
Proofpoint Virus Protection ModuleProofpoint also provides signature-based protection using leading anti-virus engines from F-Secure or McAfee:
Virus Lifecycle InformationProofpoint provides up-to-date information on viruses in the wild and the state of virus-related threats affecting your enterprise:
Placer County Office of Education uses Proofpoint Zero-Hour Anti-Virus as part of their "single, comprehensive system" to protect against both inbound and outbound messaging threats. |
 Proofpoint PlatformsHosted Service:Appliance:Virtual Appliance:Messaging Security Gateway — Virtual Edition Software:Modular DefensesDefend against inbound threats:Spam Detection Virus Protection Prevent leaks of confidential information:Optimize your email infrastructure:Encrypt sensitive information:
  |
Malware Outbreak Center: 
White Paper: 
