Posted inSecurity

NetScout enhances DDoS and traffic analytics offerings amid growing network security threats

The new solution comes at a time when DDoS attack traffic is continuing to exceed pre-pandemic levels and ISPs presenting a broader threat surface

SecurityHQ: Managed Azure Sentinel - Detection & Response

NetScout has announced the launch of Arbor Insight, which works in complement with Arbor Sightline to enhance threat detection, service delivery, and network operator visibility to address the evolving threat landscape.

According to the company, the new solution comes at a time when DDoS attack traffic is continuing to exceed pre-pandemic levels and ISPs presenting a broader threat surface.

The new, combined solution set of Sightline with Insight leverages ASI, NetScout’s unique metadata technology, to correlate multiple sources of network telemetry with global intelligence and local configuration to deliver an 80+ facet record for each monitored network communication.

It offers security and network operations teams with the optimal dataset to perform critical tasks — including time-series analysis of critical traffic dimensions and annotated flow data for in-depth investigations, forensics, and retrospective analysis. By leveraging configurable, optimised datasets, Insight delivers instant access to high-fidelity data with minimal storage and compute requirements, greatly extending the value of existing Sightline deployments.

Why networking and security teams need to collaborate to mitigate ransomware risks

The solution also delivers flexible, multi-dimensional time-series threat and traffic analytics using new customisable Advanced Traffic Reports (ATRs), which can help augment users’ operational workflows with immediate n-dimensional visibility into key areas of interest, facilitating speed-of-thought drill downs and sub-filtering to quickly expose network dynamics such as top attack targets and vectors, top talkers/services/protocols, historical anomalies, threat signatures, and more.

“Arbor Insight extends the value of Sightline by providing the right dataset at the speed of thought with integrated end-to-end workflows for superior visibility and performance,” said Tom Lyons, vice president of product, NetScout. “ATRs provide the ideal solution for short- and longer-term reporting, so operators can better answer network, security and business questions​ and provide reliable, relevant services to their customers.”