Expanding Your Network Architecture
Anywhere EndaceProbes are deployed, customers can extend their network and security monitoring capability by deploying a wide range of third-party commercial or open-source analytics applications in Application Dock.
Hosting solutions such as Palo Alto VM Series Firewalls, Cisco Firepower and Stealthwatch, AI-based security solutions from Darktrace or Bluvector or open-source tools like SNORT or Zeek on EndaceProbes enables customers to extend capability and adapt to changing needs quickly without having to deploy new hardware. These tools can analyze and inspect recorded traffic in real-time at full line-rate or analyze recorded network history for back-in-time investigation.
Confidently Accelerate Investigations
Garland Technology delivers network traffic, at full line rate, to EndaceProbes where it is continually indexed and recorded (with zero packet loss) and stored for back-in-time investigations using Playback™. Operations teams can leverage workflow integrations that use the EndaceProbe’s powerful Pivot-To Vision™ API. Pivot-To-Vision lets security analysts pivot from alerts in SIEMs - like Splunk, QRadar, ArcSight and Elastic - or monitoring tools – such as Plixer, Darktrace, BluVector, and more - into EndaceVision™, the EndaceProbe’s built-in investigation tool, to analyze the related, packet-level Network History.
Network and Security Operations Benefits
SecOps and NetOps analysts can drill down from alarm or threat indicators to the related network packet data in EndaceVision with a single click using the IP address and time range of the trigger event. EndaceVision lets them dissect, review and extract the relevant traffic from the petabytes of recorded Network History. It supports analysis to microsecond level detail with views filtered by Application, IP, Protocol, Top Talkers, and many other parameters, providing rapid insights and enabling accurate conclusions.
Pivoting directly to the related packets with a single click lets analysts rapidly establish the root cause of issues during threat hunting or when investigating security or performance issues. This lets them respond quickly, dramatically reducing the resolution time for resolving critical incidents and minimizing the risk of security threats escalating.
