Auckland-based network monitoring company Endace has formed a partnership with US based Ixia, a subsidiary of Keysight Technologies, to develop joint offerings that Endace says will provide greater visibility into network activity, even inside encrypted traffic.
The partnership will “focus on complementary and integrated solutions that enable joint customers to better manage the performance and security of their network,” Endace says.
“The combined solutions from Ixia and Endace provide enterprises with greater visibility into network activity and give analysts the detailed, packet-level evidence they need to go back-in-time to investigate and resolve security and network or application performance issues quickly and conclusively.”
Endace says Ixia’s Vision portfolio of network packet brokers complements Endace’s EndaceProbe analytics platforms by enabling control over how packets are managed and where they are delivered.
“In addition, Ixia’s Vision ONE offers active SSL decryption giving visibility into encrypted traffic and allowing it to be decrypted before it is recorded by, and stored on, EndaceProbes.”
Scott Westlake, VP business development at Ixia solutions group, said combining Ixia’s SSL decryption capabilities with Endace’s packet capture and recording would give security teams a definitive source of evidence for investigating cyber threats and performance issues.
“By hosting virtualised intrusion detection systems (IDS) and application or network performance monitoring on EndaceProbes, customers have a flexible and scalable ecosystem for real time monitoring of network traffic, including encrypted traffic,” he said.
“Customers can easily spin up new virtual monitoring applications on EndaceProbes to inspect traffic, decrypted by Ixia, in real time.”
The two companies have already collaborated to develop a solution for high-frequency trading, combining EndaceProbes with Ixia’s TradeVision network packet broker that can monitor market data feeds from more than 100 exchanges and detect and alert when gaps or delays in market feeds occur.
“Integration between Splunk and EndaceProbes streamlines investigations when market feed errors are detected and lets analysts click on a TradeVision alert in Splunk to go directly to the related packet history on their EndaceProbes,” Endace says.
“Using the built-in EndaceVision application they can drill down to analyse even ultra-short-lived microburst events at packet level to see precisely what happens and respond appropriately.”