Network Detection and Response
RSA NetWitness® Network
RSA NetWitness Network provides real-time visibility into all your network traffic with full packet capture—on premises, in the cloud and across virtual infrastructure. It allows you to:
- Detect emerging, targeted and unknown threats as they traverse your network
- Monitor the timing and movement of attackers across your network north/south and east/west
- Reconstruct entire network sessions to support forensic investigations
Network Detection and Response (NDR)
RSA NetWitness Network plays an essential role in network detection and response (NDR). Since today’s advanced, targeted threats are designed to evade traditional, perimeter-based network security tools like firewalls and intrusion detection/prevention systems, network detection and response tools like RSA NetWitness Network can help your organization rapidly detect these threats BEFORE they lead to a data breach or otherwise disrupt your business.
Unlike other network security monitoring tools, RSA NetWitness Network provides real-time visibility into all of your network traffic—east-west, north-south, in the cloud and across virtual infrastructure—eliminating blind spots. To make it easier for analysts to rapidly detect legitimate, high-risk threats in all of this network data, RSA NetWitness Network parses network data at capture time into sessionized metadata and enriches it with threat intelligence and contextual information about your business.
Network Monitoring Tools Needed
Featured Resources
Solution Brief
RSA NetWitness Network for Network Detection and Response (NDR)
Find out what differentiates RSA NetWitness Network as a network detection and response tool and how it provides immediate, deep visibility to accelerate threat detection, investigation and network forensics.
E-Book
Evolution of SIEM: Why It’s Critical to Move Beyond Logs
The RSA NetWitness Platform evolved SIEM is the only threat detection and response platform that can correlate security data across logs, packets, endpoints and netflow.
Features
Patented Parsing and Indexing Technology
Dynamically parses and enriches network data at capture time, creating sessionized metadata that dramatically accelerates alerting and analysis.
Robust Forensics Capabilities
Combines deep inspection of hundreds of protocols with a powerful, integrated tool kit for forensic investigations.
Decryption Support
Encrypted traffic is no match for RSA NetWitness Network, which provides native decryption support and integrates with third parties to provide additional support for decryption.
Benefits
Alleviates Analysts’ Alert Fatigue
Enriches network data with threat intelligence and contextual information about your business so that your analysts can quickly identify high-priority threats and reduce false positives.
Eases Management of Network Data
Pervasive visibility facilitates administration and analysis of data across distributed and virtual environments, enabling rapid detection, investigation, reporting and management of all network data.
Trusted Technology
RSA NetWitness Network received the Common Criteria certification for product security and is certified for U.S. Department of Defense Information Network UC APL.
Comprehensive Network Detection and Response
Monitors all data from any network north/south & east/west, including virtual networks, as well as packets from public clouds such as AWS and Azure. Because it enriches packet data at capture time, RSA NetWitness Network provides the immediate, deep network visibility required to accelerate detection, investigation and forensics.
Simplifies Threat Detection and Investigation
Hunt for threats without ever having to look at a PCAP again. RSA NetWitness Network offers intuitive data visualizations and nodal diagrams—in addition to a complete set of automated detection, investigation and forensics tools—to transform every analyst into an experienced threat hunter.
“The RSA NetWitness Platform enables the experts in our cyber defense center to really understand the true nature, scope and impact of an incident so they can then take immediate, targeted action.”
CISO and Senior Vice President
Infosys
RSA NetWitness Network provides Network Detection and Response (NDR) as an integral part of the RSA NetWitness Platform evolved SIEM. In addition to RSA NetWitness Network, the RSA NetWitness Platform evolved SIEM consists of RSA NetWitness Logs, RSA NetWitness Endpoint, RSA NetWitness UEBA and RSA NetWitness Orchestrator. Together, these solutions deliver the industry’s most complete visibility across logs, network and endpoint data, helping to expose the full scope of attacks and make security analysts more efficient and effective through automation and advanced analytics.
Resources
Analyst Reports
- Frost & Sullivan Enabling Technology Leadership in Network Forensics Award Learn why Frost & Sullivan recognized RSA in 2016 with its prestigious Enabling Technology Leadership award for network forensics.
Data Sheets
- RSA NetWitness Network Find out what differentiates RSA NetWitness Network as a network monitoring tool and how it provides immediate, deep visibility to accelerate threat detection, investigation and network forensics.
Infographics
- 7 Building Blocks of Better Threat Visibility Here are the sources and types of data you need to detect zero-day and other advanced threats.
- 11 Reasons to Love RSA NetWitness 11.x RSA NetWitness 11.x provides several significant enhancements and new functionality to address customers' needs. Take a look at eleven reasons to love RSA NetWitness 11.x.
- Do More with the RSA NetWitness Platform This infographic highlights the key benefits and capabilities of the RSA NetWitness Platform.
E-Books
- 7 Building Blocks of Better Threat Visibility Download this guide to find out which sources and types of data are essential to identifying advanced threats, how your team’s ability to correlate threat data compares with other organizations, and how improved visibility can ease your biggest threat detection challenges.
- Evolution of SIEM: Why It’s Critical to Move Beyond Logs The RSA NetWitness Platform evolved SIEM is the only threat detection and response platform that can correlate security data across logs, packets, endpoints and netflow.
Solution Briefs
- RSA NetWitness Platform Evolved SIEM Why traditional SIEM technolgy isn't enough for modern security environments, and how an evolved SIEM can accelerate threat detection and response.
- RSA NetWitness Platform for Threat Defense
Videos
- RSA NetWitness Platform On-Demand Demo Video Learn how the RSA NetWitness Platform can help you detect and defend against a phishing attack by leveraging logs, packets, endpoint data and threat intelligence in this demo video.
- Frost & Sullivan Enabling Technology Leadership in Network Forensics Award Learn why Frost & Sullivan recognized RSA in 2016 with its prestigious Enabling Technology Leadership award for network forensics.
Webinars
- What’s New in the RSA NetWitness Platform 11.0 Take a virtual tour of the new RSA NetWitness Platform in this 45-minute archived webinar.
White Papers
- It’s About Time Accelerating Threat Detection and Response Download this three-page brief to find out what obstacles you need to overcome and capabilities you’ll want to put in place to accelerate threat detection and response.
- GDPR Data Protection and the RSA NetWitness Platform Find out how the RSA NetWitness Platform can help support GDPR compliance activities related to breach notification and more.
- Extending Security Technology to the Cloud Explore the challenges associated with extending into the cloud the visibility required to successfully protect an organization’s data. Find out how the RSA NetWitness Platform is built to address these challenges.
- Managing the Security Skills Gap Get strategies for addressing the staffing shortage and taking pressure off your team. Learn how the RSA NetWitness Platform can improve the efficiency and effectiveness of your analysts and incident responders.
Want a Demo?
Sign up for a free demo today and watch our products in action.
Ready to Buy?
It's easy. Speak with an RSA expert anytime to request a quote.