ネクフル Product Lineup

Modern cyber attacks have become sophisticated, making it impossible to prevent 100% of intrusions with just entry measures. Once infected, confidential data can be exfiltrated to the attacker's server (C2 server), leading to significant business losses and a loss of social credibility. DDHBOX is a dedicated appliance that fills the gaps in traditional "entry measures" with "exit measures." Utilizing the top-tier threat intelligence list from JSOC (LAC Co., Ltd.), it automatically detects and blocks unauthorized communications to attackers 24/7, preventing information leaks at the source. Its greatest feature is the easy installation that requires simply placing it on the network. There is no need for software installation or configuration changes on individual PCs. Additionally, to prepare for unforeseen circumstances, a cyber insurance policy of up to 3 million yen is included as standard. This covers investigation and recovery costs, with experts providing one-stop support. DDHBOX addresses the challenges faced by small and medium-sized enterprises, such as "lack of expertise" and "limited budgets," offering maximum defense and peace of mind with minimal operational burden. It achieves a "multi-layered defense" encompassing entry, internal, and exit measures, ensuring the protection of your company's digital assets.

We would like to introduce a case study where the precision parts manufacturer implemented the exit strategy security "DDHBOX." During a security check by a business partner, they were required to have "external communication blocking," "logs," and "reporting systems," and they faced the challenge of being uneasy about data exfiltration after an intrusion, as the entry point (UTM) alone was insufficient. By adding our product inside the UTM (at the exit) to block C2 communication, they have established an operational system that can continue even with dual roles by repurposing monthly reports for internal and partner presentations. [Case Overview] ■ Challenge: No dedicated IT personnel, lacking resources for monitoring/analysis ■ Solution: Automatic notification to the administrator's email upon detection ■ Effects: - Able to provide concrete answers to key items on the checklist (monitoring/communication control/logs/reporting/emergency response/insurance) - Operations centered around notification confirmation and monthly checks, allowing for continuity even with dual roles *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case where the security solution "DDHBOX" for exit measures was implemented by an industrial machinery manufacturer. In light of reports of ransomware attacks in the same industry, concerns about external communications after an infection were increasing. There was also the challenge of understanding what constituted normal communication, given the high volume of interactions with overseas locations and partner companies. The product was installed at the network exit of the main site, with notifications set to go to "General Affairs and Information Systems + Executives." Monthly reports were regularly presented at management meetings, establishing a framework for the PDCA cycle. [Case Overview] ■ Challenge: Considered implementing EDR, but operational burden was a bottleneck ■ Solution: Clarified the role distribution between existing UTM/EDR (entry/internal/exit) ■ Effects: - Initial response procedures, such as device isolation, were triggered by notifications - A system was established to regularly explain the status of countermeasures through reports *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case where the electronic component manufacturer implemented our exit security solution, "DDHBOX." There was a large amount of development data (drawings/specifications), and the responsibility for the risk of data leakage was significant. The situation was further complicated by the introduction of partner company terminals and the use of VPNs, which increased potential entry points. By installing our product at the exit (inside the FW/UTM), C2 communications are automatically blocked. The source IP is identified through notification emails, allowing for the rapid isolation of the affected terminal. Monthly reports are utilized as documentation for client audits. [Case Overview] ■ Challenge: Lack of budget/personnel to contract a SOC ■ Solution: Share monthly reports with management and use them as documentation for client audits ■ Effects: - An additional layer has been added to stop "external communications after intrusion," increasing peace of mind. - Even when detection occurs, the combination of blocking and notifications has improved initial response times. *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case where the security solution "DDHBOX" for exit measures was implemented by a resin molding manufacturer. In a situation where many factory PCs were outdated and management was lagging, a client pointed out concerns about "pivoting attacks," necessitating countermeasures. Additionally, the inability to conduct daily monitoring due to outsourced IT management was also a challenge. Our product was implemented at the factory network exit to block C2 communications. Notifications were forwarded to the outsourced IT management, clarifying initial response coordination. Monthly reports are used to understand the blocking status and organize areas for improvement. [Case Overview] ■ Challenge: Inability to conduct daily monitoring due to outsourced IT management ■ Solution: Forward notifications to the outsourced IT management to clarify initial response coordination ■ Effects: - Provided countermeasures against pivoting risks, reducing client anxiety - Daily operations were streamlined to "notification confirmation + isolation when necessary" *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case where the construction materials manufacturer implemented the exit security solution "DDHBOX." With many locations/sites, security operations tended to be left to each site, and there was a requirement to submit security measures due to procurement requirements from major general contractors. Although a UTM was implemented, there were concerns about data exfiltration after an intrusion. We installed this product at the exits of key locations and centralized notifications to the headquarters management department. We established an operational system to monitor the situation by location through monthly reports and utilized this information for procurement requirement documentation. 【Case Overview】 ■ Challenge: Many locations/sites, with security operations left to each site ■ Solution: Designed with a structure that can be rolled out sequentially and unified the response flow ■ Effects: - Responses to procurement checks were standardized, meeting the requirements for project continuation - Operations that were previously left to each site are now managed centrally by headquarters *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case where the security solution "DDHBOX" was implemented for a food machinery manufacturer. When ransomware attacks occur during busy periods, the impact of production and shipping halts is significant. While multi-layered defense is necessary, it was challenging to secure specialized personnel or SOC contracts. Additionally, security checks from business partners have become increasingly stringent over the years. By installing our product at the exit, we automatically block C2 communications. Based on notification emails, we established a procedure for "isolating the affected device" and set up a system for regular reporting to management through monthly reports. [Case Overview] ■ Challenge: Difficulty in securing specialized personnel and SOC contracts ■ Solution: Established a procedure for "isolating the affected device" based on notification emails ■ Effects: - Operations could continue even with a dual-role system, making it harder for countermeasures to become mere formalities - Monthly reports were utilized for explanations during business partner checks *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case study of a company engaged in metal processing outsourcing that implemented the exit security measure "DDHBOX." They were requested by a major manufacturer to submit a security checklist and were pointed out the concern of being "used as a stepping stone" as a subcontractor/supplier. There was no dedicated information systems department, and the situation was being handled by someone with multiple responsibilities. With the introduction of our product, external unauthorized communication (C2) after an intrusion was blocked at the exit. When detected, the source IP was identified through email notifications, and procedures for isolating the terminal were established. A monthly report was created to explain the status of countermeasures both internally and externally. [Case Overview] ■ Challenge: No dedicated information systems department, handled by someone with multiple responsibilities ■ Solution: Created a format to explain the status of countermeasures both internally and externally through monthly reports ■ Effects: - The responses to the checklist became more specific, meeting the conditions for continuing the business relationship - The operational burden was low, allowing for continuity even with multiple responsibilities *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case where a company engaged in testing and analysis services implemented our exit strategy security solution, "DDHBOX." The client experienced an increase in requests for confirmation regarding "information leakage measures" and "log management," and there were many data media brought in from external sources, making it impossible to eliminate infection risks completely. Additionally, there was a concern about a lack of confidence in investigations and explanations in the event of an accident. By installing our product at the exit and blocking C2 communication, we reduced the risk of data being taken out. We created procedures for device isolation and determining the need for investigation, starting from notification emails, and clarified the insurance-backed investigation/recovery/consulting support as a "last resort." 【Case Overview】 ■ Challenge: Lack of confidence in investigations/explanations in the event of an accident ■ Solution: Clarified insurance-backed investigation/recovery/consulting support as a "last resort" ■ Effects: - Prepared explanatory materials (reports, systems) for clients, making audit responses easier - Clarified initial actions during an incident, reducing the psychological burden on responsible personnel - Evaluated as "preparation including emergency response" *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case where the security exit strategy "DDHBOX" was implemented for a robot SIer. In an environment with high security demands due to frequent connections to customer networks, the client required "control of external communications" and "incident response capabilities." It was also a challenge that operating a SOC with a small team was not realistic. The product was implemented at the headquarters exit, and automatic blocking of C2 communications was established. Notification emails were consolidated to the CSIRT contact point (also serving other roles), and a primary response flow was developed. Monthly reports are utilized as explanatory materials for the client. [Case Overview] ■ Challenge: It is not realistic for the company to operate a SOC with a small team. ■ Solution: Consolidated notification emails to the CSIRT contact point (also serving other roles) and developed a primary response flow. ■ Effects: - We were able to propose the implementation of exit measures in response to the client's security demands. - An additional layer was added to stop communications with attackers, allowing for continued maintenance with peace of mind. - Operations became less prone to becoming mere formalities, even with a small team. *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case where a medical device manufacturer implemented our exit strategy security solution, "DDHBOX." The impact of leaks of quality documents and design data is significant, and regulatory compliance and client audits required the presentation of logs and systems. Additionally, it was challenging to monitor and analyze daily due to a dual-role structure. Our product was installed at the network exit to automatically block C2 communications. Notification emails were shared with the quality and information systems dual-role team to determine initial response procedures. Monthly reports were incorporated into regular audit materials to establish ongoing operations. [Case Overview] ■ Challenge: Logs and systems were required for regulatory compliance and client audits. ■ Solution: Monthly reports were incorporated into regular audit materials to establish ongoing operations. ■ Effects: - It became easier to explain the "detection, blocking, logging, and reporting" required for audits. - Additional measures were put in place to mitigate damage after an intrusion, increasing peace of mind. - The operational burden was minimal, allowing for continuity. *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case where a company engaged in warehousing and transportation-related industries implemented our exit security solution, "DDHBOX." In an environment highly dependent on IT, such as WMS and shipping labels, where any downtime can lead to immediate losses, the challenge was that the locations were scattered, making it difficult to uniformly manage on-site PCs. Additionally, there was an increase in security checks from business partners (shippers). By installing our product at the exit, we were able to block external unauthorized communications after an intrusion. Notifications were centralized to the headquarters management department, allowing the on-site team to focus solely on terminal isolation. Monthly reports are also utilized for explanations to shippers. 【Case Overview】 ■ Challenge: Scattered locations made uniform management of on-site PCs difficult ■ Solution: Centralized notifications to the headquarters management department, allowing the on-site team to focus only on terminal isolation ■ Effects: - Enabled responses to exit security inquiries from shippers - Clarified the division of initial response duties, allowing for measures to be taken without increasing the burden on the on-site team *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case where the exit strategy security "DDHBOX" was implemented by an IT vendor. While customers demanded security checks (monitoring/blocking/logging/emergency response), EDR/NDR was considered but posed challenges due to high operational difficulty. Additionally, there were situations where small-scale SOC operations were not feasible. With the introduction of our product, we implemented blocking of C2 communications at the exit. We prepared notification emails and monthly reports as materials for customer reporting, and established a system where investigation/recovery support with insurance can be utilized in emergencies. 【Case Overview】 ■ Challenge: EDR/NDR is a candidate, but operational difficulty is high ■ Solution: Prepared notification emails and monthly reports as materials for customer reporting ■ Effects - Responses to customer checks became more concrete, making contract renewals and new proposals easier - We were able to continuously submit operational results (reports) for measures - We were able to streamline operations to be manageable even with a small team *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case where a chemical manufacturer implemented our exit security solution, "DDHBOX." In a situation where there is highly confidential information related to formulations and prototypes, and the impact of leaks is significant, it was challenging to manage updates completely due to the presence of factory equipment networks. We felt the need for "damage mitigation after intrusion" rather than just "preventing intrusion." By installing our product at the exit, we automatically block C2 communications. We established procedures to identify and isolate the terminal of the source IP through notifications. We built an operation to report monthly to management and connect it to improvements. 【Case Overview】 ■ Challenge: Difficult to manage updates completely due to factory equipment networks ■ Solution: Established procedures to identify and isolate the terminal of the source IP ■ Effects: - Preparedness for information exfiltration after intrusion was enhanced, leading to risk reduction - Initial responses were determined based on notifications, making it less likely for responses to become dependent on individuals - Reports provided an understanding of the current situation, highlighting areas that should be prioritized for strengthening *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case where the export security solution "DDHBOX" was implemented for a trading company. As the verification of supply chain measures increased for business partners and contractors, the environment became complex with multiple locations, remote work, and VPNs. It was also a challenge for the IT department to monitor 24/7 with a small team. Our product was implemented at the headquarters' exit to block unauthorized communications to the outside. We established an operation that consolidates notifications to a primary contact point and issues isolation instructions to locations when necessary. Monthly reports are generated to provide materials for external explanations. 【Case Overview】 ■ Challenge: Complex communication routes with multiple locations, remote work, and VPNs ■ Solution: Consolidating notifications to a primary contact point and issuing isolation instructions to locations when necessary ■ Effects - We were able to demonstrate "blocking external communications" during checks from business partners. - We were able to streamline operations to be manageable with a small team. - Including support/insurance in case of emergencies made it easier to get approvals. *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case study of a company engaged in CAD/CAM outsourcing that implemented the exit strategy security solution "DDHBOX." Handling customer design data makes information leakage critical, and submitting a checklist from mid-sized manufacturers has become mandatory. While there was a desire to invest in security, the lack of personnel available for operations was also a challenge. Our product was installed at the network exit to automatically block C2 communications. Upon receiving a notification, we defined the procedure of "isolation of the terminal → investigation support if necessary," and established a system to utilize monthly reports for customer explanations and internal management. 【Case Overview】 ■ Challenge: Desire to invest in security but lack of personnel for operations ■ Solution: Utilize monthly reports for customer explanations and internal management ■ Effects: - The basis for checklist responses was organized, leading to continued outsourcing - The operations became lighter, allowing for continued measures even with shared duties - The initial response and support system in case of an incident became clear *For more details, please download the PDF or feel free to contact us.

We would like to introduce a case where the exit strategy security "DDHBOX" was implemented at an automotive parts manufacturer. As security requirements from complete vehicle manufacturers have become increasingly stringent year by year, although UTM/antivirus measures were already in place, the "external communication blockage after intrusion" was weak, and the environment had many entry points such as factories, offices, and partner companies. By implementing our product at the exit, C2 communication is automatically blocked. Notifications trigger the isolation of target devices and standardize initial responses, ensuring ongoing operations with regular monthly reports on the status of countermeasures. [Case Overview] ■ Challenge: Although UTM/antivirus measures are in place, "external communication blockage after intrusion" is weak. ■ Solution: Standardization of target device isolation and initial response triggered by notifications. ■ Effects: - Ability to present "exit strategies" during client checks, facilitating smooth audit responses. - Increased materials for explaining the risk of being used as a stepping stone, providing reassurance for continued transactions. - Operations centered around automatic blocking, reducing the burden on the field. *For more details, please download the PDF or feel free to contact us.