Faster Network Recording Speed Helps Protect Against DDOS

Thursday, 2 June 2016, 10:18 am
Press Release: Endace

Faster Network Recording Speed Helps Protect Against DDOS-backed Security Breaches

Endace releases new network recorders capable of sustained 40Gbps recording with simultaneous mining and analysis of captured traffic

AUCKLAND, New Zealand — June 1, 2016 — Endace, a world leader in high-speed network monitoring and recording technology, today announced the availability of its ultra-fastEndaceProbe 8100 Series Network Recorders. The new 8100 Series can capture and store network traffic at a sustained rate of 40 gigabits per second (Gbps) and is designed to provide ultra-high-speed monitoring and recording for the forensic investigation of network security breaches and performance issues.

DDOS attacks are often used to camouflage simultaneous attack activity, such as malware installation or data exfiltration They can overwhelm monitoring systems, flooding them with so much traffic that they fail completely under the load, or generate so many alerts it becomes impossible to see what other concurrent activity may be taking place.

The high-performance 8100 Series EndaceProbes not only support sustained 40Gbps recording, but also allow multiple users to data mine and analyze that traffic at the same time. This ensures security teams can continue to access and investigate recorded traffic—even during events such as DDOS attacks when their other monitoring systems may be overwhelmed.

“It’s essential to ensure your network monitoring and recording infrastructure can record without loss, even under the heavy of loads you would experience during a DDOS attack,” says Stuart Wilson, CEO of Endace, “Being able to reconstruct even the smallest aspect of an attack vector, exactly when you most need it – under heavy DDOS attack - is critical for effective breach analysis and legal audit trail creation.”

The new 8100 Series is the first product on the market advanced enough to record traffic from high-speed 40/100GbE networks without loss. It can capture traffic at high speed without losing packets, and can write captured data to disk at speeds sufficient to cope with high traffic loads.

Leveraging Endace’s proven, lossless DAG data capture card technology the 8100 Series EndaceProbes offer up to eight 1GbE/10GbE or two 40GbE monitoring ports, allowing simultaneous monitoring of multiple links on a single 2RU appliance. They leverage highly optimized SSD-based RAID storage to deliver sustained, 40Gbps write-to-disk rates into 24TB of onboard storage.

Multiple EndaceProbes can be connected to form a centrally managed, network-wide monitoring and recording fabric with distributed storage. EndaceVision, a browser-based application bundled with every EndaceProbe, provides centralized data mining and visualization for investigating security and network performance events across an entire network.

ENDS

© Scoop Media