Capture Client
SonicWall Capture Client is a unified endpoint protection platform powered by SentinelOne, combining behavior-based malware detection, advanced threat hunting, application vulnerability management and endpoint remediation in a single client. Protect endpoints against ransomware and advanced threats while gaining the visibility and control to investigate, remediate and roll back attacks
Modern Endpoint Protection
Modern endpoint protection needs to prevent threats while also giving security teams the visibility and tools to investigate and respond when attacks occur. Capture Client combines prevention, detection and endpoint remediation capabilities within a single cloud-managed platform.
Powered by SentinelOne technology and integrated with the SonicWall security ecosystem, Capture Client provides centralized control of attack visualization, ransomware rollback and remediation, network control and remote shell troubleshooting. This gives administrators greater visibility across endpoints while simplifying day-to-day security management.
Modern endpoint protection needs to prevent threats while also giving security teams the visibility and tools to investigate and respond when attacks occur. Capture Client combines prevention, detection and endpoint remediation capabilities within a single cloud-managed platform.
Powered by SentinelOne technology and integrated with the SonicWall security ecosystem, Capture Client provides centralized control of attack visualization, ransomware rollback and remediation, network control and remote shell troubleshooting. This gives administrators greater visibility across endpoints while simplifying day-to-day security management.
What Administrators Need to Look for When Buying an Endpoint Security Solution
As mass telecommuting continues, administrators need to deliver consistent protection for endpoints, anywhere. This brief helps walk security administrators through evaluating endpoint solutions with real-world requirements in mind. Read through the brief for solutions to common challenges (from keeping security products up to date to managing licenses and everywhere in between).
Why Choose Capture Client?
SonicWall Capture Client combines next-generation endpoint protection with autonomous EDR capabilities powered by SentinelOne. It helps organizations prevent advanced threats, identify application vulnerabilities, investigate suspicious activity and remediate attacks across endpoints both on and off the corporate network.
Centralized, cloud-based management gives administrators greater visibility and control across their endpoint environment, while integration with the wider SonicWall security ecosystem helps connect endpoint and network security operations.
Behavior-Based Malware Detection
Detect and stop ransomware, known and unknown malware, memory exploits and other advanced threats using behavior-based analysis designed to identify malicious activity before it can execute.
Application Vulnerability Management
Gain visibility into vulnerable applications across protected endpoints, including vulnerability severity and the information administrators need to identify and prioritize potential security risks.
Cloud Endpoint Management
Manage Capture Client through centralized, cloud-based controls for endpoint visibility, troubleshooting, remediation, licensing and security administration.
Endpoint Remediation & Ransomware Rollback
Respond to attacks quickly with endpoint remediation capabilities and one-click Windows rollback, helping restore data affected by ransomware and other malicious activity.
Manage Multiple Tenants with Ease
Capture Client provides centralized, multi-tenant endpoint management for MSSPs and organizations managing multiple environments. The Global Dashboard provides a consolidated view of tenant health, helping administrators monitor:
- The number of infections
- Vulnerabilities present
- The version of Capture Client installed
- What and who is being blocked the most by content filtering
Administrators can also see which devices are online and operating, providing a centralized view of endpoint status across managed environments.
“The improvements made to the Capture Client 3.5 management console allow me to effectively configure, install, and manage our deployment across 5,000 sites and 60,000 endpoints. There are a number of improvements both functional and cosmetic that deliver a more friendly experience. It streamlines my onboarding process and better overall visibility into what is happening at my customer sites.”
Tony Kingma, Senior IT Manager, Epicor Software
Threat Hunting Software Powered by SentinelOne
Find and Remove Threats Already Inside Your Environment
Prevention is only one part of endpoint security. When an attacker gets inside an environment, security teams need the visibility to investigate suspicious activity, understand what happened and respond before the attacker can achieve their objectives.
Capture Client's threat hunting capabilities, powered by SentinelOne, help administrators investigate endpoint activity and uncover adversaries hiding within their environment. Advanced Capture Client capabilities provide deeper visibility for identifying suspicious behavior and supporting both live investigation and endpoint threat hunting.
Capture ATP Integration
Advanced Capture Client integrates with SonicWall Capture Advanced Threat Protection (ATP) to analyze suspicious files in a secure cloud environment before they execute on an endpoint. Suspicious files can be tested, identified and quarantined, helping administrators detect advanced threats that may evade traditional endpoint defenses.
How Capture Client Protects the Endpoint
Capture Client combines prevention, detection, investigation and remediation capabilities to help protect endpoints throughout the lifecycle of an attack.
Prevent and Detect Threats
Next-generation antivirus and behavior-based malware detection help identify ransomware, malware, memory exploits and suspicious activity before they can compromise an endpoint.
Identify Application Vulnerabilities
Application vulnerability intelligence gives administrators visibility into vulnerable software and its severity, helping teams identify potential weaknesses across protected endpoints.
Investigate and Hunt for Threats
Threat hunting and attack visualization help security teams investigate suspicious endpoint activity, understand the scope of an attack and uncover threats that have already entered the environment.
Remediate and Roll Back Attacks
Endpoint remediation capabilities help administrators respond to detected threats, while Windows one-click rollback can restore data affected by ransomware and other attacks.
Frequently Asked Questions
Resources
