Need IDS/IPS for Your Internal Network?
Designed for internal and distributed security and network monitoring, Lancope’s StealthWatch leverages NetFlow, IPFIX and sFlow from routers and switches as well as SPAN ports to deliver unified visibility across physical and virtual networks.
With its flow-based, three-tiered architecture, StealthWatch cost-effectively monitors and protects internal networks and remote locations without requiring resource-intensive signature updates to detect attacks and anomalies.
| Classic IDS/IPS technology | Flow-based StealthWatch |
|---|---|
| Database signatures detect known attacks | Real-time monitoring of host behaviors and traffic analysis to identify threats |
| Per-packet, inline blocking of attacks | Mitigation via network infrastructure or integration with inline devices |
| Cost prohibitive at speeds above 1G | Unlimited monitoring of high speed networks at no extra cost |
| Minimal forensics value | Archived audit trail of network IP communications |
| Little to no network performance tools for identifying DoS, worm outbreaks | Extensive network performance reports including top talkers, interface utilization, exporter tracking, etc. |
| No identity integration | User-identity aware |
| Limited visibility per direct network connection | End-to-end network visibility |
| Commonly deployed technology | Innovative technology deployed by early adopters |
