What's New in StealthWatch v6.5
•Télécharger en tant que PPTX, PDF•
0 j'aime•4,925 vues
StealthWatch 6.5 is a significant release of the StealthWatch network monitoring software that features new security and flow analysis capabilities. It introduces an operational network and security intelligence dashboard for faster threat investigation. The release also includes user-defined threat criteria for more collaborative threat defense, an enhanced quick view of flow data, and integration with Palo Alto Networks firewalls for added context. StealthWatch Labs security updates provide detection of suspect and target data hoarding.
Recommandé
Recommandé
Contenu connexe
Tendances
Tendances (20)
Similaire à What's New in StealthWatch v6.5
Similaire à What's New in StealthWatch v6.5 (20)
Plus de Lancope, Inc.
Plus de Lancope, Inc. (20)
Dernier
Dernier (20)
What's New in StealthWatch v6.5
- 2. • Your Presenters Scott Block Product Marketing Matt Robertson Technical Marketing Engineer • Agenda – Technical overview of StealthWatch 6.5 – Q & A Session – Any Follow Up Activities • Quick Hits – It represents a major advances in functionality – Current users are experiencing excellent results What’s New in StealthWatch 6.5 – Introduction
- 4. StealthWatch Solution Vision Decide Act Observe Orient Meaning Knowledge Data Context • Flow data • Logs • Packets • Etc…. • Intelligence • Application • User • Etc… Collect Store Correlate Synthesize Analyze Turning Data into KnowledgeTurning Data into Knowledge
- 6. • New Security Features – Operational Network & Security Intelligence (ONSI) for faster, more effective troubleshooting – StealthWatch Labs Security Updates for enhanced protection – User Defined Threat Criteria (UDTC) for more collaborative threat defense • Flow Enhancements – Enhanced quick view shows most important details at a glance – Save key flow queries and results through flow query management StealthWatch 6.5 – At a Glance • Improved User Experience – Introduction of some operational elements of a new Web UI optimized for Security Analysis • FlowSensor 4000 – NetFlow generation for 10 GE environments – Application identification • Palo Alto Networks Integration – Added application and identity awareness • REST API – make flow information easily accessible
- 10. 10 Alarm Colors Blue Yellow Orange Red No security event Some security events; baseline not deviated (<1x) – slightly suspicious Many security events; baseline is deviated (1x>2x) – very suspicious Significant security events; baseline significantly deviated (>2x) – extremely suspicious OR Known Bad has occurred
- 17. 17© 2013 Lancope, Inc. All rights reserved. New Security Events Suspect Data Hoarding Target Data Hoarding • Detects systems that have downloaded an unusually large amount of data from other inside hosts • Contributes to EXI points • Alarming status is disabled by default • Detects systems that have unusually large amounts of data downloaded from them • Contributes to EXI points • Alarming status is disabled by default