Monitoring activity between your network environment and the Internet provides visibility of security events related to malware beaconing, command and control, network tunneling and data exfiltration activity.

Benefits:

• Captures north/south traffic from clients and servers

• Enables detection of exfiltration, C2, tunneling, beaconing

Activity within your network can include security events related to lateral movement and staging of attacks between workstations and important internal resources such as internal web applications, file servers or your system infrastructure.

Benefits:

• Captures east/west traffic between clients and servers

• Enables detection of lateral movement, staging, internal threats

Your data center infrastructure is where your valuable information is stored, making it a target for theft and unauthorized access. Sensors placed between these servers and virtual hosts provide visibility of security events related to this activity.

Benefits:

• Captures east/west traffic between servers (including virtual)

• Enables detection of data theft, unauthorized access

Public facing applications such as mail services, web sites and business-to-business applications are constantly attacked. Monitoring network zones that host these applications provides visibility of security events related to unauthorized access and data exfiltration.

Benefits:

• Captures north/south traffic between DMZ and external clients

• Enables detection of unauthorized access, vulnerability exploitation, exfiltration

Benefits:

• Captures north/south traffic between external clients and the internal networks. Provides visibility to traffic even if it is blocked by the firewall

• Enables detection of exploitation attempts