Discover Who Caused the Problem and Who Is Affected with StealthWatch Identity Awareness

StealthWatch IDentity is a powerful, real-time solution that requires no agent or service running on an identity or authentication server. Administrators simply click on any IP address within the StealthWatch Management Console and specify a date range or point in time. The IDentity can even connect a username with all the IP addresses into which it is currently logged on. Multiple administrators can access this data simultaneously, making the IDentity an ideal tool for both network optimization and security across the enterprise.

Network and security administrators gain the ability to connect individual network transactions with individual users through the IDentity, which in turn means that users can be held accountable for their actions, and unexpected user needs can be better anticipated and met. This capability significantly improves audit controls for regulatory compliance, since administrators can immediately identify the party responsible for a hardware, software or security issue. The IDentity also simplifies identifying other users affected by an event, so that quarantine and corrective actions can be taken sooner.

This 24x7 monitoring of who is on the network, connected automatically with what each user is doing, overcomes the forensics challenges presented by dynamic enterprise environments. Since it is part of the StealthWatch System, the IDentity works both with StealthWatch native flow capture appliances and with traffic accounting information generated by NetFlow, IPFIX and sFlow-enabled routers and switches. In addition, the IDentity appliance supports a wide range virtual private networks (VPNs), DHCP IP addressing within network segments and large pools of dial-up access devices.

The StealthWatch IDentity Advantage:

• Integrates optimization of security and network operations with user identity tracking
• Automatically identifies individual users and user sessions with specific IP addresses for greater user accountability and faster, more immediate insight into unexpected network events
• Requires no agent or service, and includes built-in support for 8+ market-leading identity store technologies
• Integrates easily with traffic accounting information generated by NetFlow, IPFIX and sFlow-enabled routers and switches
• Cost-effectively supports enterprise infrastructures with a limited number of IDentity appliances, each independently managed by the appropriate domain administrator