PACKETRON – NETWORK INTELLIGENCE APPLICATIONS

Packet Slicing reduces the volume of data to be forwarded for analysis and processing by a network appliance by reducing the packet length. This is especially useful for network applications that only require header analysis and or a defined set of bytes from each packet. Packet length is reduced based on user configurable rules. Read more about Network Intelligence functions 

Deduplication identifies and removes duplicate packets from being sent to a network appliance. While duplicate packets may occur on the network from backup and failovers deployment architectures, the more common occurrence is with the use of multiple SPAN ports across connected switches and routers that are feeding to a network appliance. When a network appliance handles duplicate packets, the duplicate packets consume the tools limited processing resources, resulting in significant performance degradation and may also affect the accuracy and results reported. Read more about Network Intelligence functions 

With the increase in traffic capacity on the one hand and the need for greater processing granularity on the other, many network tools ingest traffic metadata rather than the raw traffic data packets themselves. There are well-standardized metadata frameworks as well as numerous specified fields and extensions for additional vendor-specific fields. Often, metadata reports are generated by the network element itself like a switch or a router. The disadvantage is that as metadata generation is not the primary objective of the switch or router, metadata performance generated by the switch or router may be degraded in times of congestion versus Niagara’s solution where such degradation does not take place. Furthermore, to address congestion, the switch or router utilizes traffic sampling, instead of taking into account every packet in the flow. Read more about Network Intelligence functions 

Data Masking enables the enterprise to forward and share data traffic across departments, while at the same time providing them with a tool to mask private and confidential user information that is contained in the data. Read more about Network Intelligence functions 

SSL/TLS decryption offering is an important foundation of the security visibility layer. Without SSL/TLS Decryption your organization is blind to attacks, malware and other security and cyber threats impacting your network via the TLS layer. Organizations need a way to identify threats and malware in order to protect their users and intellectual property.

Niagara's SSL/TLS decryption platform supports three deployment modes:

• Passive out of band - the SSL/TLS decryption platform receives a copy of the encrypted traffic. The decrypted traffic can be forwarded to an out of band tool. The decryption process has no impact of the network traffic. This mode is only available with supporting TLS version and cipher suites.

• Active out of band - the SSL/TLS decryption platform sits inline, receiving the encrypted traffic. The encrypted traffic is decrypted and re-encrypted back to the network. A copy of the decrypted traffic can be forwarded to an out of band appliance. The actions of the out of band appliance itself have no impact on the network traffic.

• Active inline - the SSL/TLS decryption platform sits inline, receiving the encrypted traffic. The encrypted traffic is decrypted, and the decrypted traffic may be forwarded to an inline appliance. Decrypted traffic from the inline appliance is received back at the SSL/TLS decryption platform and is re-encrypted on to the network.
  
  Read more about Network Intelligence functions 

Tunnels are used to encapsulate traffic and send it from one location to another. This application supports the ability to encapsulate traffic and send it to a remote/central location. It also supports the ability to terminate a tunnels and forward the decapsulated (de-tunneled) traffic to a network tools. Read more about Network Intelligence functions 

Header Stripping is designed to facilitate and modify traffic in a manner that the intended network tool can process it and fulfill its intended purpose. Niagara’s application will strip the header from the traffic exposing the relevant packet for processing. Read more about Network Intelligence functions 

Regex Patterns application, functions as an expansion for existing filtering and data masking capabilities, while adding additional new modes of operation. The user can define any pattern through a regular expression, or load a predefined expression. With this capability, the user can perform advanced packet filtering, advanced masking and advanced session filtering.  With session filtering, once the pattern is detected in any packet, the entire session is identified and can be filtered. For every pattern match, the user can configure to filter or to exclude the match.

Read more about Network Intelligence functions