DNS Defense 
DNS Defense Cloud 
IP Defense 
ThreatSTOP for AWS 
The printers were talking to China.
West Memphis School District started a ThreatSTOP trial with no problem in mind. What it found was malware and botnets already inside its network. ThreatSTOP now blocks more than 140,000 attacks a week, with no new hardware and no specialist staff to run it.
Protected on paper, breached in practice.
The district's network was protected by its firewall's built-in features, an M86 content filter administered by the state, and a free DNS forwarding content filter, also run by the state. Even so, the network and its data were inadequately protected, and malware and botnets had already got in.
“I didn’t know what I didn’t know.”
With ThreatSTOP switched on, the district could see what its devices were talking to, block it, and quarantine infected machines.
The district
The district runs over a dozen campuses, with 6,000 students and 750 teachers and administrators. Its 1,500 computers and 50 servers reach the internet through one exit point at the district office, through a router and firewall.
The problem
When the district signed up for a ThreatSTOP trial, it had no particular problem in mind. What the trial showed was eye-opening.
I had no idea my network printers are talking to China!
It quickly became clear that the network's data security was inadequate, leaving the district exposed to data breaches and attacks. "I didn't know what I didn't know," the administrator said.
That experience is common. Signature-based products such as content filters, antivirus, IDS/IPS and firewall filters do not reliably catch botnets and advanced malware, or do not catch them in time, which leaves their users with a false sense of security.
What ThreatSTOP did
ThreatSTOP runs as a cloud service on the district's existing firewall, as the first line of defense against ransomware, botnets and phishing, and as protection against data leaving the network. The change was immediate: an average of more than 140,000 attacks blocked every week.
A sample of the outbound blocks showed criminal groups trying to reach into the network, flagged by lists including the Russian Business Network, Spamhaus DROP, Cymru bogons and DShield, with IP addresses in Ukraine, Latvia and China. None of them are addresses anyone at a school district should be talking to.
The result
- Full visibility into what is happening on the network.
- More than 140,000 attacks blocked per week.
- Reports and tools to find and quarantine infected machines.
Those figures are typical for a small to medium school district. Larger districts and colleges see much higher attack volumes, because they have more users and devices and more open internet access.
Why the district chose ThreatSTOP.
Find out what your network is talking to.
Run a ThreatSTOP trial on the firewall you already have and see what gets blocked. Request a trial, or talk to an engineer.