FireEye Network Forensics PX 2060ESS-120

Organizations need early detection and swift investigation of incidents to determine scope and impact, effectively contain threats and re-secure their network. The FireEye Network Forensics solution pairs the industry's fastest lossless network data capture and retrieval solution with centralized analysis and visualization.

It accelerates the network forensics process with a single workbench that simplifies investigations and reduces risk. FireEye Network Forensics allows you to identify and resolve security incidents faster by capturing and indexing full packets at extremely rapid speeds.

With Network Forensics, you can detect a broad array of security incidents, improve the quality of your response and precisely quantify the impact of each incident. As part of the FireEye Network Forensics solution, investigation analysis appliances reveal hidden threats and accelerate incident response by adding a centralized workbench with an easy-to-use analytical interface.

Analysts can review specific network packets and sessions before, during and after an attack. Being able to reconstruct and visualize the events triggering malware download or callback enables your security team to respond effectively and swiftly to prevent recurrence.

They can expand visibility into attacker activity by decoding protocols typically used to laterally spread attacks in a network. This unique combination of high-performance packet capture and in-depth analytics helps quickly recognize and monitor every element of an attack.

Key Points

Product Features