Lancope StealthWatch FlowCollector 4000 - Network monitoring device - 2U - rack-mountable
- Leverages existing investment in NetFlow, IPFIX and sFlow technology
- Stops threats that are visible at the enterprise level
- Provides real-time traffic analysis for billing, bandwidth accounting, and network performance troubleshooting
- Works in extremely high-speed environments
Lancope's StealthWatch FlowCollector appliance leverages NetFlow (from Cisco, Juniper), IPFIX, or sFlow (from HP ProCurve, Brocade) to provide cost-effective, behavior-based network protection and high performance levels for distributed enterprise environments.
The FlowCollector appliance aggregates high-speed network behavior data from multiple networks or network segments to deliver end-to-end protection and improve performance across geographically dispersed networks. It provides a cost-effective solution for organizations seeking to protect internal resources while delivering an optimal user experience and safely maintaining trusted relationships with customers, partners and other third-party networks. The FlowCollector is available as a physical or virtual appliance.
-
Leverages existing investment in NetFlow, IPFIX and sFlow technology
StealthWatch gathers traffic information from NetFlow, IPFIX or sFlow enabled routers and switches. Most layer 3 enabled network devices are already equipped to export NetFlow, IPFIX or sFlow traffic; the network engineer need enable and utilize this powerful technology. No additional hardware, sensor technology, inline device or software agent is required. In addition to leveraging existing infrastructure to provide in-depth visibility into the internal network, the FlowCollector can also conduct behavioral analytics on data from perimeter-based technologies such as firewalls. Integrating internal and external monitoring provides greater contextual awareness for improved network and security operations.
-
Stops threats that are visible at the enterprise level
The StealthWatch FlowCollector monitors traffic across hundreds of network segments simultaneously, providing the ability to spot suspicious network behavior that only becomes apparent at the enterprise level. For example, the FlowCollector employs a sophisticated correlation technology called "Worm Tracker, " which visually graphs the spread of a worm or virus throughout the network from node to node, providing instant visibility into the scope and impact of a worm outbreak.
-
Provides real-time traffic analysis for billing, bandwidth accounting, and network performance troubleshooting
NetFlow analysis allows for extremely fine-grained traffic reporting and accounting. Where SNMP polling falls short, NetFlow excels. StealthWatch utilizes NetFlow (or other flow data) to its fullest extent, providing top talkers, services, and conversations in both a real-time and historic basis for each NetFlow, IPFIX or sFlow enabled router and switch interface active on the network. The StealthWatch FlowCollector enables traffic accounting, historical trending, and troubleshooting capabilities not found in any other flow-based technology available.
-
Works in extremely high-speed environments
Since StealthWatch FlowCollectors rely on NetFlow, IPFIX or sFlow capable network devices as well as StealthWatch FlowSensors to generate traffic flow information, it does not have to perform both traffic collection and behavioral analysis at the same time. The result is extremely rapid detection and response for networks operating at speeds exceeding 10 Gbps.
