Going Back In Time with Playback
The trouble with real-time monitoring is if you miss something the first time around it's often impossible to later reconstruct exactly what took place. Perhaps your monitoring tool wasn't configured to pick the issue up or it wasn't deployed in the right place to detect the issue the first time around.
Recorded Network History can help. With an accurate record of network packets, you can use Playback to replay the packets relating to a specific event back past your analytics tools for another look. And you can replay the traffic to several different tools to get a richer picture of what happened.
Playback can replay traffic faster than it was captured to quickly scan for specific activity (such as using a new rule to check for evidence of a Zero Day incursion) or slower than it was captured in order to do deep analysis.
But my Analytics Tools only do Real-Time Analysis
For analytics tools that don't understand the concept of historical traffic, our customers often deploy a standalone instance specifically for back-in-time investigations. That way you can Playback last week's traffic without interfering with your production monitoring systems.
With a complete, accurate history of network activity recorded, organizations are no longer restricted just to real-time monitoring. They can deploy analytics on-demand, saving license fees and letting them leverage the power of their real-time monitoring tools for historical investigations.
Analyze network traffic with market-leading technology that's hosted on the EndaceProbe Analytics Platform through the Fusion Partner Program.
The Fusion Partner Program brings together solutions from leading security and performance analytics vendors who leverage the EndaceProbe's Application Dock hosting and workflow API to integrate Network History into their applications.