Features

StealthWatch™ Xe for NetFlow provides the following features to cost-effectively optimise security and network operations across the enterprise:

Leverages existing investment in NetFlow technology
StealthWatch Xe gathers network traffic information from NetFlow-capable routers and switches. Most layer 3 enabled Cisco and Juniper network devices are already equipped to export NetFlow traffic, the network engineer need only enable and utilise this powerful technology. No hardware, sensor technology, inline device, or software agent is required.

Stops threats that are visible only at the enterprise level
StealthWatch Xe monitors traffic across hundreds of network segments simultaneously providing the ability to spot suspicious network behavior that only becomes apparent at the enterprise level. For example, StealthWatch Xe for NetFlow employs a sophisticated correlation technology called "Work Tracker" which visually graphs the spread of a worm or virus throughout the network from node to node, providing instant visibility into the scope and impact of a worm outbreak.

Provides real-time traffic analysis for billing, bandwidth accounting, and network performance troubleshooting
NetFlow analysis allows for extremely fine-grained traffic reporting and accounting. Where SNMP polling falls short, NetFlow excels. StealthWatch utilises NetFlow to its fullest extent, proving top talkers, services, and conversations in both a real-time and historic basis for each NetFlow enabled router and switch interface active on the network. StealthWatch Xe for NetFlow enables traffic accounting, historical trending, and troubleshooting capabilities not found in any other flow-based technology available today.

Works in extremely high-speed environments
Since StealthWatch Xe for NetFlow relies on NetFlow-capable routers and switches to generate traffic flow information, it does not have to perform both traffic collection and behavioral analysis at the same time. The result is extremely rapid detection and response for networks operating at speeds exceeding 10Gb per second.