Introducing NetWitness Platform's support for AWS VPC Traffic Mirroring!
By partnering with AWS and integrating with their AWS VPC Traffic Mirroring , NetWitness Platform will now allow customers to access the right virtual traffic and network metadata from their AWS environments. AWS VPC Traffic Mirroring allows users to capture and inspect network traffic to analyze packets without using any third-party packet forwarding agents. The solution provides insight and access to network traffic across the VPC environment.
By capturing, retaining, and analyzing packets stored in the AWS cloud, NetWitness Platforms gains further visibility into potential threats and promotes greater organizational security. With this agent-less packet capture capability, NetWitness Platform provides analysts with the context they need to fully understand the threats they’re investigating. By combining network visibility with other sources such as Logs, Endpoint and Netflow, NetWitness Platform provides security analysts with a single, comprehensive view.
NetWitness Platform enables customers to obtain the visibility needed to secure critical infrastructure and empowers any analyst to identify, understand, and mitigate advanced threats. By integrating with AWS, the solution helps customers close the visibility gap created by workloads in the cloud. This new feature provides flexible AWS deployment options, which allow RSA NetWitness Platform components to be deployed either in a Full Stack (all cloud) or Hybrid (on premise & cloud) configurations.
NetWitness Platform customers can also enable VPC Traffic Mirroring to non-Nitro compute instances, which use the Xen-based hypervisor. This allows analysts to universally inspect network traffic on additional EC2 instance types and provides additional options for leveraging VPC Traffic Mirroring across both Nitro and non-Nitro compute instance types, including C4, D2, G3, G3s, H1, I3, M4, P2, P3, R4, X1 and X1e.
For technical implementation details, see our AWS Deployment Guide
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.