During 35days of testing during the firstquarter of 2021, ICSA Labs tested the detection capabilities of SonicWall’sadvanced threat defensesolution, SonicWall Capture Advanced Threat Protection (ATP), with a mix of 1,471test runs. The mix was primarily composed of new and little-known malicious threats –i.e., recently harvested threats not detected by traditional security products.
ICSA Labs tested the detection capabilities of SonicWall’s advanced threat defense solution, SonicWall Capture Advanced Threat Protection (Capture ATP) with RTDMI, with a mix of 1,471 test runs over the course of 35 days.
The mix was primarily composed of new and little-known malicious threats not detected by traditional security products. Additionally, ICSA Labs launched innocuous applications and activities to additionally test SonicWall Capture ATP in terms of false positives.
Throughout testing, ICSA Labs observed product logs to ensure not only that SonicWall Capture ATP indicated the existence of a malicious threat but also that logged threats were distinguishable from other logged traffic and events. SonicWall Capture ATP passed, having met all criteria requirements.
SonicWall capture ATP did remarkably well during this test cycle -detecting 100% of previously unknown threats while having zerofalse positives. Figures 2 and 3 below further highlight the solution’s detection effectiveness and false positives (FPs).
Standard ICSA Labs Advanced Threat Defense (ATD) testing is aimed at vendor solutions designed to detect new threats that other traditional security products miss. Thus,the focus is on how effectively vendor ATD solutions detect these unknown and little-known threatswhile minimizing false positives.
