SonicWall Capture Client

SonicWall Capture Client is an enterprise unified endpoint protection and detection response solution engineered to defend workstations, laptops, and virtual desktops from advanced malware, ransomware, and targeted cyber attacks. Powered by SentinelOne next-generation endpoint technology and integrated with SonicWall's cloud security ecosystem, it combines autonomous behavioral AI prevention, automated ransomware rollback, and centralized endpoint management into a lightweight agent.

The software installs across Windows, macOS, and Linux operating systems, managed centrally through the cloud-based Capture Security Center console. It integrates natively with SonicWall firewalls to enforce network endpoint compliance, automatically inspecting client health and isolating non-compliant or compromised endpoints from corporate networks. Common operational use cases include blocking living-off-the-land fileless scripts, rolling back encrypted files automatically after ransomware infection attempts, enforcing endpoint content filtering and USB device controls, and executing enterprise-wide threat hunting queries.

Featuring automated root-cause analysis and interactive attack storyboards, SonicWall Capture Client empowers security analysts to understand infection vectors and lateral movement paths within minutes. When malware executes, the platform terminates malicious processes and restores tampered system files and registry keys to their pristine pre-infection state with a single click. The solution simplifies endpoint security administration, eliminates ransomware downtime, and delivers comprehensive host defense across distributed enterprise fleets.