Category: StealthWatch 
StealthWatch from Both the Private and Public Sectors
As we come to the close of 2011 it is time to step back and look at how both the private and public sectors view Lancope's StealthWatch product family. From the perspective of the private sector Lancope is: “The leading provider of flow-based monitoring to ensure high-performing and secure networks for global enterprises. Unifying critical network performance and security information for borderless network visibility, Lancope provides actionable insight that reduces the time between problem onset and resolution. Enterprise customers worldwide, including healthcare, financial services, government and higher education institutions, rely on Lancope to make better network decisions and avoid costly… READ MOREAssessing the Business Value of StealthWatch
It is easy for anyone reponsible for IT management to get so consumed with everyday technology and security issues that they do not take time to evaluate the priorities of the businesses and organizations they serve. Lancope has prepared a few concise documents to help IT management quickly evaluate StealthWatch from the business perspective. The full whitepaper: “Aligning Network, Security, and Application Performance Monitoring with Business Value and Priorities” is available on the Lancope website. This whitepaper covers how flow-based monitoring holds specific advantages for filling gaps in visibility, delivering valuable intelligence to supplement traditional IDS/IPS perimeter protection, as well… READ MORETracking Worms with StealthWatch
While worms seem to be less prevalent than they were in the past, we do still see them appear now and then. Over the past few months we’ve seen Morto over RDP 3389/tcp and Duqu over SMB 445/tcp rear their heads. Luckily we can use flow data to identify these types of hosts within the network. With Morto, we can simply look for scanning over the RDP port. Ideally you’ll have some Dark IP subnets/ranges within your network making this a little easier if you don’t currently use Lancope’s StealthWatch. Finding incomplete sessions to these IP ranges becomes a red… READ MORECATEGORIES NetFlow, Network Security, Network Visibility, StealthWatch
TAGS stealthwatch, netflow, security, worm
TAGS stealthwatch, netflow, security, worm





