Cyber security
Network security is rapidly turning into one of the most serious global challenges faced by organisations today. With billions of dollars written off the market cap of large organisations in recent months, the consequences of a cyber-security breach are proving to be very costly and damaging. Ensuring that you have the right infrastructure in place to see every attack as it happens and deal with the aftermath of a breach is now a mandatory requirement for every organisation large and small.
Power to see all
With guaranteed 100% packet capture at any line rate at speeds up to 100Gb/s, Endace Systems are proving themselves to be the most robust, powerful and scalable platform for hosting cyber security applications available today. They are trusted by government intelligence agencies, CERT teams, critical infrastructure providers and a range of commercial organisations around the world.
Uniquely, the Endace Monitoring and Recording Fabric enables organisations to deploy multiple applications side-by-side on the same system, yielding a range of resource savings and event management efficiency improvements such as reduced mean time to resolution (MTTR) on network security ‘events’.
Cyber security applications
Cyber security encompasses a wide range of different tools; with each one providing visibility into different elements of the cyber mix. To help you navigate the options, we’ve broken cyber security applications down into the following five categories:
Intrusion Detection
High-performance Network Intrusion Detection is an essential element of every modern high-speed network and is a basic requirement for a range of different compliance standards including PCI. Our IDS is based on open-source SNORT® and provides the highest levels of threat visibility right across the network.
Network Forensics
Being able to establish exactly what happened after a security event has occurred is critical. Because Endace Systems capture every packet they provide a perfect platform for forensic investigations. Endace Systems enable rapid access to all the packets of interest and are tightly integrated with our tools, including Endace Security Manager.
Vulnerability Scanning
Regularly scanning the network for potential weaknesses and vulnerabilities is more than best practice, it's a critical part of network management and is a mandatory requirement for any organisation seeking PCI compliance.
NetFlow
NetFlow plays a major role in helping to identify a range of different cyber-attacks – particularly DDoS attacks. Endace Systems have the ability to generate highly accurate sampled or unsampled NetFlow at speeds up to 30Gb/s.
Latency Monitoring
Significant changes in network latency can be an important indicator that something is wrong in the security space. Our latency monitoring tools provide fast alerts to anomalies present in the network.
Find out how to host your own custom cyber applications.