Average Ratings 0 Ratings
Average Ratings 1 Rating
Description
SentryWire serves as a comprehensive packet capture device and network security monitoring system designed to provide complete visibility into networks across various sectors, including enterprise, federal, and industrial control systems. It is capable of retaining packet capture data for extensive periods—ranging from weeks to years—ensuring that security teams maintain critical insights and can carry out investigations on threats well beyond the lifespan of other monitoring tools. By utilizing commodity hardware, distributed storage solutions, and a modular design, it adeptly captures, indexes, and retains full packet data at scale, accommodating everything from lightweight virtual setups to extensive enterprise clusters. In contrast to traditional packet sniffers that only record headers or metadata, SentryWire archives the entire packet stream, allowing for forensic replays, in-depth packet inspections, and thorough retrospective analyses while offering extended historical investigations. It accommodates capture rates that span from a modest 1 Mbps to an impressive over 1 Tbps, featuring capabilities such as real-time logging, advanced filtering, compression, visualization, and sophisticated BPF-syntax analysis to enhance security operations. This robust platform ultimately empowers organizations to navigate complex network environments with confidence, ensuring they remain vigilant against emerging threats.
Description
Snort stands as the leading Open Source Intrusion Prevention System (IPS) globally. This IPS utilizes a collection of rules designed to identify harmful network behavior, matching incoming packets against these criteria to issue alerts to users. Additionally, Snort can be configured to operate inline, effectively blocking these malicious packets. Its functionality is versatile, serving three main purposes: it can act as a packet sniffer similar to tcpdump, function as a packet logger that assists in troubleshooting network traffic, or serve as a comprehensive network intrusion prevention system. Available for download and suitable for both personal and commercial use, Snort requires configuration upon installation. After this setup, users gain access to two distinct sets of Snort rules: the "Community Ruleset" and the "Snort Subscriber Ruleset." The latter, created, tested, and validated by Cisco Talos, offers subscribers real-time updates of the ruleset as they become available to Cisco clients. In this way, users can stay ahead of emerging threats and ensure their network remains secure.
API Access
Has API
API Access
Has API
Integrations
BluVector Advanced Threat Detection
Elastic Observability
EndaceProbe
Extreme Networks
Forcepoint Behavioral Analytics
Fortinet
Gigamon
HP-UX
Joe Sandbox
Keysight Application Threat Intelligence
Integrations
BluVector Advanced Threat Detection
Elastic Observability
EndaceProbe
Extreme Networks
Forcepoint Behavioral Analytics
Fortinet
Gigamon
HP-UX
Joe Sandbox
Keysight Application Threat Intelligence
Pricing Details
No price information available.
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
SentryWire
Country
United States
Website
www.sentrywire.com
Vendor Details
Company Name
Cisco
Founded
1984
Country
United States
Website
www.snort.org