Cisco StealthWatch Flow Sensor 1210 - Network monitoring device - GigE - 1U - rack-mountable
- Layer 7 application visibility
- Packet-level performance and analysis
- Alerts on network anomalies
- Lower costs
The Flow Sensor produces telemetry for segments of the switching and routing infrastructure that can't generate NetFlow natively. It also provides visibility into the application layer data. In addition to all the telemetry collected by Stealthwatch, the Flow Sensor provides additional security context to enhance the Stealthwatch security analytics. Advanced behavioral modeling and cloud-based multilayered machine learning is applied to this dataset to detect advanced threats and perform faster investigations.
The Flow Sensor is installed on a mirroring port or network tap and generates telemetry based on the observed traffic. The volume of telemetry generated from the network is determined by the capacity of the deployed Flow Sensors. Multiple Flow Sensors may be installed. It also works in environments where an overlay monitoring solution requiring additional security context better fits the operations model of the IT organization.
-
Layer 7 application visibility
Provides true Layer 7 application visibility by gathering application information along with ad-hoc on-demand packet capture (PCAP). This includes data features like RTT (Round trip time), SRT (Server Response Time), Retransmissions.
-
Alerts on network anomalies
Additional telemetry from the Flow Sensor, such as URL information for web traffic and TCP flag detail, helps generate alarms with contextual intelligence so that security personnel can take quick action and mitigate damage.
-
Lower costs
Enhances operational efficiency and reduces costs by identifying and isolating the root cause of an issue or incident within seconds.
