Audience
Companies searching for a solution to get complete security visibility and advanced network traffic analysis
About Symantec Network Forensics
Get complete security visibility, advanced network traffic analysis, and real-time threat detection with enriched, full-packet capture. Symantec Security Analytics, the award-winning Network Traffic Analysis (NTA) and forensics solution is now available on a new hardware platform that offers much higher storage density, deployment flexibility, greater scalability, and cost savings. This new model separates the hardware purchase from the software purchase, enabling you to adopt new enterprise licensing that lets you choose how to deploy the solution: on-premises, as a virtual appliance, or in the cloud. With this latest hardware innovation, you can achieve the same performance and greater storage capacity in up to half the rack space footprint. Security teams can deploy anywhere in their organization and expand or contract their deployment as needed, without having to change licenses. Reduced cost and easier adoption.
Other Popular Alternatives & Related Software
Trisul Network Analytics
In today's bandwidth unconstrained, encrypted, cloud-centric networks you can no longer separate traffic analytics from security and investigation activities. Trisul helps organizations of all sizes deploy full-spectrum deep network monitoring which can serve as a single goto source of truth for performance monitoring, network design, security analytics, threat detection, and compliance. Traditional approaches based on SNMP, Netflow, Agents, or Packet Capture have a narrow focus and rigid vendor-supplied analytics. Trisul is the only platform that provides a rich and open platform you can innovate upon. Includes a tightly integrated backend datastore and a web UI. Yet, open enough to plug into a different backend or to drive Kibana, Grafana UIs. Our design goal is to pack as much performance as we can in a single node. For larger networks scale out by adding more probes and hubs.
Learn more
LiveWire
LiveWire is a high-performance network packet-capture and forensic-analysis platform that captures and stores detailed packet data across physical, virtual, on-premises, and cloud networks. It is designed to give Network-Ops and Security teams deep visibility into network traffic, from data centers to SD-WAN edges, remote sites, and cloud environments, filling in the blind spots left by telemetry-only monitoring. LiveWire delivers real-time packet capture that can be selectively stored and analyzed with advanced workflows, visualizations, and correlation tools; it can automatically detect encrypted traffic and store only what’s needed (headers or metadata), saving disk space while preserving forensics data. It supports “intelligent packet capture,” converting packet-level data into enriched flow-based metadata (called LiveFlow), which can feed into the companion monitoring platform BlueCat LiveNX.
Learn more
SentryWire
SentryWire is a full packet capture appliance and network security monitoring platform built for total network visibility across enterprise, federal, and ICS/OT environments. It retains weeks, months, or years of full-fidelity packet capture data so security teams never lose critical visibility and can investigate threats long after other tools have aged out. It captures, indexes, and retains complete packet data at scale using commodity hardware, distributed storage, and a modular architecture that supports environments ranging from lightweight virtual deployments to enterprise-scale clusters. Unlike packet sniffers that focus only on headers or metadata, SentryWire stores the entire packet stream for forensic replay, deep packet inspection, retrospective analysis, and extended historical investigation. It supports capture rates from 1 Mbps to more than 1 Tbps, with real-time logging, filtering, compression, visualization, and advanced BPF-syntax analysis.
Learn more
CommView
CommView is a powerful network monitor and analyzer designed for LAN administrators, security professionals, network programmers, home users…virtually anyone who wants a full picture of the traffic flowing through a PC or LAN segment. Loaded with many user-friendly features, CommView combines performance and flexibility with an ease of use unmatched in the industry. This application captures every packet on the wire to display important information such as a list of packets and network connections, vital statistics, protocol distribution charts, and so on. You can examine, save, filter, import and export captured packets, view protocol decodes down to the lowest layer with full analysis of over 100 supported protocols. With this information, CommView can help you pinpoint network problems and troubleshoot software and hardware. The newest CommView version 7.0 introduced SSL/TLS traffic decryption on the fly.
Learn more
Company Information
Broadcom
Founded: 1991
United States
www.broadcom.com/products/cyber-security/network/atp/network-forensics-security-analytics
Videos and Screen Captures
Other Useful Business Software
99.99% Uptime for MySQL and PostgreSQL Databases
Cloud SQL Enterprise Plus delivers near-zero downtime with 35 days of point-in-time recovery. Supports MySQL, PostgreSQL, and SQL Server.
Product Details
Platforms Supported
Cloud
On-Premises
Training
Documentation
Webinars
In Person
Videos
Support
Phone Support
Online
