| Managed Gateway Traffic Analysis |
ProtectPoint Managed Gateway Traffic Analysis (MGTA) Features:
Traffic Measurement
Our Traffic measurement product allows you to measure and interpret your traffic activities. ProtectPoint MGTA tracks network usage, generating a series of statistics for each host in the local subnet and for the subnet as a whole. The needed information is collected and processed by ProtectPoint MGTA by simply observing the traffic on the network. All packets in the subnet are counted and associated with a sender/receiver pair. In this way, it is possible to track, report and interpret all traffic activities.
The following table shows the information registered by ProtectPoint MGTA:
| Data Sent/Received |
The total traffic (volume and packets) generated or received by the host. Classified according to network protocol (IP,IPX,AppleTalk,etc) and IP Protocol (FTP,HTTP,NFS,etc.)
|
| Used Bandwidth
|
Actual, average, and peak bandwidth usage.
|
| IP Multicast
|
Total amount of multicast traffic generated by the host.
|
| TCP Sessions History
|
Currently active TCP sessions establised/accepted by the host.
|
| UDP Traffic
|
Total amount of UDP traffic sorted by port.
|
| TCP/UDP Used Services
|
List of IP-based services (e.g.open and active ports) provided by the host with the list of the last five hosts that used them.
|
| Traffic Distribution
|
Local traffic, local to remote traffic, remote to local traffic (local hosts attached to the broadcast network).
|
| IP Traffic Distribution
|
UDP vs TCP traffic, relative distribution of the IP protocols according to the host name.
|
| Protocol Utilization
|
Distribution of the observed traffic according to both protocol and source/destination (local vs remote).
|
| Packet Distribution
|
Total number of packets sorted by packet size, unicast vs broadcast vs multicast and IP vs non-IP traffic.
|
| Local Subnet Traffic
|
Monitored traffic between each pair of hosts in the subnet.
|
| Network Flows
|
Traffic statistics for used-defined flows (tafffic of particular interest to the user).
|
Traffic Monitoring
Traffic monitoring is the ability to identify those situations where network traffic does not comply with specified policies or when it exceeds some defined thresholds. Typical causes of misbehavior are related to misconfiguration of operating systems, network interfaces, or software applications.
ProtectPoint MGTA provides support for detecting a variety network configuration problems including:
- Use of duplicate IP Addresses.
- Identification of local hosts in "promiscuous mode". Spot PC.s .sniffing. your traffic.
- Misconfiguration of software applications, by analyzing protocol traffic data.
- Service misuse detection, Identification of hosts that do not make use of specified proxies.
- Protocol misuse, Identification of hosts that use unnecessary, insecure or unauthorized protocols.
- Identification of subnet routers, Detection of misconfigured workstations acting as routers.
- Excessive network bandwidth utilization, helping you understand how traffic is impacting protocols like VOIP.
Network Optimization and Planning
Sub-optimal configuration of hosts might influence negatively the overall performance of a network. ProtectPoint MGTA allows the administrator to identify potential sources of unproductive bandwidth usage, particularly the use of unnecessary protocols and sub-optimal routing problems. Indirectly, through traffic characterization and distribution, it is possible to revise policies for the network to promote wiser bandwidth usage.
ProtectPoint Relationship Bonus Features:
- Free Gateway Traffic Analysis software system updates for the life of the service!
- Access to our experienced, certified Security Analysts and Engineers.
- ProtectPoint analysts and security engineers review and receive, on a daily basis, information from hundreds of sources to ensure we are constantly abreast of the latest security threats thereby enabling us to understand and respond to your critical security issues.
- Access to real-time, in depth, comprehensive information on all ProtectPoint services from your secure web-based Customer Portal.
|
|
|
 |
