topic Re: AutoFocus and WildFire in General Topics

AutoFocus and WildFire

atul.srivastava — Thu, 21 Mar 2019 22:52:54 GMT

Hi,

Anyone please explain the major difference and usage between AutoFocus and WildFire in terms of enterprise security.

Thanks

Re: AutoFocus and WildFire

reaper — Fri, 22 Mar 2019 10:04:37 GMT

They both have a completely different function

Simply put: AutoFocus is log aggregation, WildFire is malware analysis

AutoFocus allows you an overview of the battlefield and alerts you to incidents through collected data

WildFire receives and analyzes files traversing your and others' firewall and creates signatures to block such files, those signatures are then rolled out to firewalls and endpoints to protect them

WildFire also feeds data into AutoFocus

Re: AutoFocus and WildFire

atul.srivastava — Sun, 24 Mar 2019 20:07:30 GMT

Hello Reaper,

Thanks for your message!

so basically AutoFocus do not block any threat and only works on identifying the threats?

Re: AutoFocus and WildFire

reaper — Sun, 24 Mar 2019 21:05:27 GMT

No, its more like a SIEM (but better 😉 ) as it aggregates different information sources and applies analytics to the data
And provides you with statistics and reports

Re: AutoFocus and WildFire

atul.srivastava — Sun, 24 Mar 2019 22:35:56 GMT

Thanks Reaper. I have found a video explaining the actual working of AutoFocus as well.

https://www.youtube.com/watch?v=dI0QrybypVg