Call a Specialist Today! 800-886-5369

RSA NetWitness Network
Network Security and Monitoring


RSA NetWitness Network

RSA Products
RSA NetWitness Logs and Network Analysis
RSA NetWitness Logs and Network Analysis
#ED-SA-ANLY-210
List Price: $15,000.00
Our Price: $14,957.00

Click here to jump to more pricing!

Overview:

RSA NetWitness Network provides real-time visibility into all your network traffic—on premises, in the cloud and across virtual infrastructure. It allows you to:

  • Detect emerging, targeted and unknown threats as they traverse your network
  • Monitor the timing and movement of attackers across your network
  • Reconstruct entire network sessions to support forensic investigations

Network Security and RSA NetWitness Network

RSA NetWitness Network plays an essential role in network security and network monitoring. Since today’s advanced, targeted threats are designed to evade traditional, perimeter-based network security tools like firewalls and intrusion detection/prevention systems, network security monitoring tools like RSA NetWitness Network can help your organization rapidly detect these threats BEFORE they lead to a data breach or otherwise disrupt your business.

Unlike other network security monitoring tools, RSA NetWitness Network provides real-time visibility into all of your network traffic—east-west, north-south, in the cloud and across virtual infrastructure—eliminating blind spots. To make it easier for analysts to rapidly detect legitimate, high-risk threats in all of this network data, RSA NetWitness Network parses network data at capture time into sessionized metadata and enriches it with threat intelligence and contextual information about your business.

Features:


Patented Parsing and Indexing Technology

Patented Parsing and Indexing Technology

Dynamically parses and enriches network data at capture time, creating sessionized metadata that dramatically accelerates alerting and analysis.

Robust Forensics Capabilities

Robust Forensics Capabilities

Combines deep inspection of hundreds of protocols with a powerful, integrated tool kit for forensic investigations.

Decryption Support

Decryption Support

Encrypted traffic is no match for RSA NetWitness Network, which provides native decryption support and integrates with third parties to provide additional support for decryption.


Benefits:

Alleviates Analysts’ Alert Fatigue

Enriches network data with threat intelligence and contextual information about your business so that your analysts can quickly identify high-priority threats and reduce false positives.

Eases Management of Network Data

Pervasive visibility facilitates administration and analysis of data across distributed and virtual environments, enabling rapid detection, investigation, reporting and management of all network data.

Trusted Technology

RSA NetWitness Network received the Common Criteria certification for product security and is certified for U.S. Department of Defense Information Network UC APL.

Comprehensive Network Monitoring

Monitors all data from any network, including virtual networks, as well as packets from public clouds such as AWS. Because it enriches packet data at capture time, RSA NetWitness Network provides the immediate, deep network visibility required to accelerate detection, investigation and forensics.

Simplifies Threat Detection and Investigation

Hunt for threats without ever having to look at a PCAP again. RSA NetWitness Network offers intuitive data visualizations and nodal diagrams—in addition to a complete set of automated detection, investigation and forensics tools—to transform every analyst into an experienced threat hunter.

Solutions:

Today’s cyber attacks are unparalleled in sophistication and organizations are failing to keep up. As dwell time continues to increase, organizations are struggling to identify and prioritize threats. Over 76% of organizations are dissatisfied with their current ability to detect and investigate threats using their current data and tools, according to a recent study by RSA titled Threat Detection Effectiveness Global Benchmarks 2016. But what options do they have? Most depend on perimeter-based security solutions. One solution is to capture data that provides visibility into the actions, movements and tactics of threat actors in order to increase the ability to defend against attacks.

Benefits:

  • Gain complete visibility across enterprise networks
  • Continuously monitor all traffic
  • Faster analysis reduces risk exposure
  • Reduce dwell time by rapidly detecting and identifying new threats
  • Reduce risk exposure with deep insights
  • Understand the full scope of attacks

RSA NetWitness Network exposes network data to enhance a security team’s capabilities to detect and respond to today’s advanced threats. RSA NetWitness Network provides immediate deep visibility for rapid detection, efficient investigation and forensics, in order to reduce dwell time. With unparalleled speed for real-time behavior analytics, RSA patented technology accelerates detection and investigation of threats as they traverse your network. RSA NetWitness Network provides real-time visibility into all your network traffic—on premises, in the cloud and across virtual environments. RSA NetWitness Network enables threat hunting with streamlined workflows and integrated, automated investigation tools that analysts use to hunt and monitor the timing and movements of threat actors. Through a unique combination of behavioral analytics, data science techniques and threat intelligence, RSA NetWitness Network detects known and unknown attacks that put organizations at risk.

NetWitness Network HighLights

You Don’t Know What You Don’t Know

Organizations that collect specific types of data find increased value compared to those who don’t.

RSA Threat Detection Effectiveness Global Benchmarks 2016

One option to improve threat detection is to capture data that provides visibility into the actions, movements and tactics of threat actors in order to increase the ability to defend against attacks. Network Packets is one of the top 3 data sources that organizations have seen as valuable for detecting threats. The RSA NetWitness Network solution provides visibility and analytics for network packets to improve threat detection.

Advanced Threat Defense

Gain greater visibility, detect threats sooner and focus response more effectively

With unparalleled speed for real-time behavior analytics, RSA patented technology accelerates detection and investigation of threats as they traverse your network. By collecting and analyzing network packets, organizations gain deep visibility into the nature of traffic on their enterprise networks.

Alleviates Analysts’ Alert Fatigue
Enriches network data with threat intelligence and contextual information about your business so that your analysts can quickly identify high-priority threats and reduce false positives.

Simplifies Threat Detection and Investigation
Hunt for threats without ever having to look at a PCAP again. RSA NetWitness Network offers intuitive data visualizations and nodal diagrams— in addition to a complete set of automated detection, investigation and forensics tools—to transform every analyst into an experienced threat hunter.

Figure 1: RSA NetWitness Comprehensive Nodal View of Incidents
Figure 1: RSA NetWitness Comprehensive Nodal View of Incidents

Intuitive Investigation & Forensics

Comprehensive Investigation Toolkit for Forensic Analysis
When every second counts, RSA provides the tools an analyst needs to quickly investigate incidents and reduce risk. Network data from packets is enriched with business and identity context in addition to threat intelligence, which then provide a consolidated and comprehensive view that reveals the insights an analyst needs in order to follow the trail left by threat actors.

Accurate Hunting with Context & Threat Analytics

Real-time capture and enrichment of network data guides the hunter
A critical aspect of hunting is having the tools you need available. RSA provides content in Hunter Packs to get your analysts started down the right path.

Deeper Understanding of the Full Scope of an Incident

Comprehensive and Continuous Network Monitoring
Monitors all data from any network, including virtual networks, as well as packets from public clouds such as AWS. Because it enriches packet data at capture time, RSA NetWitness Network provides the immediate, deep network visibility required to accelerate detection, investigation and forensics.

Eases Management of Network Data
Pervasive visibility facilitates administration and analysis of data across distributed and virtual environments, enabling rapid detection, investigation, reporting and management of all network data. From the intuitive nodal views to the extensive and robust tools available for investigation, the tasks that an analyst has to perform are all available within one platform so that an organization can understand the full scope of attacks and the risks they pose.

Trusted Technology

RSA NetWitness solutions received the Common Criteria certification for product security and are certified for U.S. Department of Defense Information Network UC APL.

Scalable Platform

RSA NetWitness Network is an integral part of the RSA NetWitness Platform, an enterprise-grade, modular and flexible platform that meets the needs of customers as they evolve their security strategies. In addition to RSA NetWitness Network, the RSA NetWitness Platform consists of RSA NetWitness Logs, RSA NetWitness Endpoint, RSA NetWitness UEBA Essentials. Together, these solutions deliver the industry’s most complete visibility across logs and network and endpoint data, helping to expose the full scope of attacks and make security analysts more efficient and effective through automation and advanced analytics.

Documentation:

Download the RSA NetWitness Network Datasheet (.PDF)

Pricing Notes:

RSA Products
RSA NetWitness Logs and Network Analysis
RSA NetWitness Logs and Network Analysis
#ED-SA-ANLY-210
List Price: $15,000.00
Our Price: $14,957.00