zIPS with Samsung Knox, leverages the Samsung Knox for MTD capabilities to provide advanced detections, enhanced group-based remediations and unparalleled forensic details.

By leveraging the unique information provided by the Knox for MTD API, zIPS with Samsung Knox provides threat detections that are not available on other platforms. For example, zIPS with Samsung Knox analyzes and identifies additional system anomalies, data exfiltration via network traffic patterns, and suspicious network connections.

Based on privacy/security/compliance policies, admins select the Samsung Knox for MTD remediation they would like performed for each threat and group in the zIPS management console, zConsole. zIPS with Samsung Knox’s enhanced remediation options include isolating malicious apps from the network, uninstalling or preventing the installation of malicious apps and customized data leakage prevention (DLP) actions to prevent unauthorized data exfiltration (e.g., restricting Bluetooth sharing, preventing SD card transfers, limiting access to the clipboard, disabling screen capture).

For all threats detected, including the advanced ones described above, zIPS with Samsung Knox leverages the Samsung Knox for MTD capabilities to provide the most granular and detailed threat forensics available today.