AutoFocus and WildFire

[atul.srivastava]

Hi,

Anyone please explain the major difference and usage between AutoFocus and WildFire in terms of enterprise security.

Thanks

[reaper]

They both have a completely different function

Simply put: AutoFocus is log aggregation, WildFire is malware analysis

AutoFocus allows you an overview of the battlefield and alerts you to incidents through collected data

WildFire receives and analyzes files traversing your and others' firewall and creates signatures to block such files, those signatures are then rolled out to firewalls and endpoints to protect them

WildFire also feeds data into AutoFocus

[atul.srivastava]

Hello Reaper,

Thanks for your message!

so basically AutoFocus do not block any threat and only works on identifying the threats?

[reaper · Accepted solution]

No, its more like a SIEM (but better 😉 ) as it aggregates different information sources and applies analytics to the data
And provides you with statistics and reports

[atul.srivastava]

Thanks Reaper. I have found a video explaining the actual working of AutoFocus as well.

https://www.youtube.com/watch?v=dI0QrybypVg