Endace partnership with Plixer delivers enhanced deep-dive security forensics
08 Jun, 2016, 09:00 BST
Integration between Plixer 's Scrutinizer and EndaceProbe network recorders lets analysts pivot from alerts direct to recorded packets for forensic analysis of security events
AUCKLAND, New Zealand, June 8, 2016 /PRNewswire/ -- Endace, a world leader in high-speed network monitoring and recording technology, today announced a partnership with Plixer, a leading security analytics company. The partnership provides integration between Plixer's Scrutinizer™, flow-based analysis solutions, and EndaceProbe™ high-performance Network Recorders to improve the ability for SecOps and NetOps teams to investigate network security and performance issues faster and more accurately.
Logo - http://photos.prnewswire.com/prnh/20160310/343084LOGO
Using Flow-based data, Scrutinizer delivers deep insight into user, application and network device behavior and improves real-time situational awareness for SecOps and NetOps teams. Scrutinizer's built-in Flow Analytics™ performs behavioral analysis on collected flows to identify suspicious behavior on the network.
EndaceProbes, deployed across the network, capture and record a 100% accurate record of network traffic, providing a full, packet-level back-in-time history of network activity that is a perfect complement to Scrutinizer's flow based monitoring and alerting.
"The ability to pivot from high-level security alerts directly to a detailed forensic examination of packet-level data is critical to enabling SecOps and NetOps teams to see exactly what's happening in real-time and allowing them to respond to events quickly," says Endace CEO, Stuart Wilson.
Integration between EndaceProbes and Scrutinizer allows users to pivot from an event of interest in the Scrutinizer UI directly to the related packets recorded on EndaceProbes. Packets of interest can be retrieved from the EndaceProbes seamlessly from within the Scrutinizer user interface, allowing immediate, packet-level examination using Wireshark, EndacePackets or other packet-level analysis tools.
"The combination of intelligent flow analysis and alerting and immediate access to a detailed back-in-time traffic history delivers unparalleled visibility into network activity," says Scott Brown, director of sales, Plixer. "This integration optimizes the workflow for SecOps and NetOps teams, enabling faster, more accurate analysis, improved response times and reduced resolution times for network security and performance issues."
About Endace
For more than 15 years, Endace has provided high-speed, network recording and visibility solutions to monitor and protect some of the world's largest, most complex networks. Customers include global banks, telcos and service providers, media and broadcast companies, health organizations, retailers, e-commerce and web giants, governments and large enterprises. Customers choose Endace technology because it can monitor and capture network traffic with 100% accuracy regardless of network speeds or loads. It can scale to meet the needs of the fastest networks and is built on an open architecture that enables integration with a wide variety of custom, open source and commercial solutions.
About Plixer
Plixer International, Inc. is a leading security analytics and flow forensics provider focused on engineering the incident response system for uncovering unwanted communication behaviors. Rather than depending on packet signatures, their strategy uncovers stealthy communications by leveraging NetFlow, IPFIX, sFlow, and other derivatives. The company was built by network and system engineers who understand the need for scalable distributed collection solutions that meet the dynamic demands of security and network professionals. Customers include Walmart, CNN, The Coca-Cola Company, Lockheed Martin, IBM, AT&T, Raytheon and Xerox.
Related Links
SOURCE Endace