FireEye NX 1400 - security appliance

The FireEye NX series is a group of threat prevention platforms that stop web-based attacks that traditional and next-generation firewalls (NGFW), IPS, AV, and web gateways miss. The NX protects against zero-day web exploits and multi-protocol callbacks to keep sensitive data and systems safe. Advanced targeted attacks use the web as a primary threat vector to compromise key systems, perform reconnaissance on existing defenses, establish long-term control and access to networked systems, and exfiltrate data.

FireEye NX platforms are a turnkey system that can be deployed in-line at Internet egress points to block inbound web exploits and outbound multi-protocol callbacks. They employ the purpose-built Multi-Vector Virtual Execution (MVX) engine to accurately confirm zero-day attacks, create real-time protections, and capture dynamic callback destinations. Dynamic analysis of zero-day attacks within a full-featured virtual analysis environment yields real-time threat intelligence to protect the local network and share with subscribers of the FireEye Dynamic Threat Intelligence (DTI) cloud. In addition, the FireEye NX can signal into incident response mechanisms, such as SIEM, and also offers TCP resets for out-of-band blocking of TCP, UDP, or HTTP connections.

As part of the FireEye Threat Prevention Platform, the NX works with other FireEye platforms to protect against blended, advanced targeted attacks that use web-based attacks, spear phishing, and zero-day exploits. When the NX is deployed along with the EX and CM, customers not only get real-time protection against malicious URLs, but also the ability to connect the dots of a blended attack, for instance identifying other targeted individuals who received the same malicious URL in spear-phishing emails. This is the actionable intelligence necessary to protect organizations against advanced targeted attacks.