CloudArmour

SOLUTION OVERVIEW

CloudArmour provides in-depth visibility into cloud workloads with full security controls, allowing organizations to comprehensively understand their cloud security status and take appropriate action to meet the security requirements of both the DevOps evolution and the new cloud infrastructure architecture. Hillstone CloudArmour combines microsegmentation and runtime protection to protect cloud-native applications and workloads. It provides advanced intrusion prevention and powerful antivirus capabilities. It also integrates vulnerability and compliance management across the application lifecycle. The tool helps enterprises deploy a cyber-resilient security infrastructure in the cloud.

FEATURES

Full and Deep Security Visibility of Converged Cloud

Workload CloudArmour provides a centralized dashboard of the cloud security posture for hosts and Kubernetes clusters that allow organizations to have a unified workload monitoring and real-time assets management. Its posture perspective function provides a deep insight into vulnerabilities relations and traffic connections between applications and services, which potentially unveil any vulnerable applications, abnormal traffic, risky behaviors, and other info that security operators could take action against.

Advanced threat detection and runtime protection

The advanced threat detection and prevention capability can help detect threats and mitigate risks during runtime on cloud workloads. It creates behavior models based on workload activities, identifies abnormal behaviors, and responds with rules to mitigate potential threats. It also provides robust monitoring and blocking features to protect against intrusion attacks such as abnormal logins, reverse shells, webshells, and local privilege escalation. It delivers advanced Anti-virus capabilities to add an extra layer of security to the cloud environment.

Unified and Granular Network Micro-segmentation

CloudArmour can minimize the threat attack surface via industry-leading micro-segmentation and traffic steering technology. It automatically discovers the application dependencies and dynamically enforces the micro-segmentation policies to avoid the proliferation of potential threats among cloud assets. CloudArmour’s smart policy assistant will additionally aid in generating the appropriate policies to best optimize the policy configuration of running systems without interruption across their private, public or hybrid cloud.

Complete vulnerability Management Across the Entire Application lifecycle

CloudArmour provides deep insights and management of the vulnerabilities of images, containers, working nodes and hosts, and integrates security as part of the Continuous Integration and Continuous Deployment workflow throughout the application lifecycle, triggering alerts if necessary to mitigate potential risks ahead of time. Images with serious vulnerabilities can be alerted and blocked from reaching production.

Some CWPP vendors provide workload protection only in cloud or virtual machine environments, respectively, but Hillstone CloudArmour supports a hybrid mode. can manage and secure your organization's applications and hosts, whether they are in the local or public cloud.

ASK FOR DETAILS