It prevents phishing attacks by controlling the sites to which users can submit valid corporate credentials.

It employs automated policy enforcement to allow trusted behavior with a new Device-ID policy construct.

It is a centrally delivered cloud service with unified detection policies that can be embedded in existing control points.

It enables data sharing with third-party tools such as security information and event management (SIEM) systems.