WHAT DOES THIS TECHNOLOGY DO?
Qosmos ixEngine identifies and extracts information traveling over networks, providing a true picture of its purpose, use and context. It is unique in its capabilities to identify the hundreds of protocols used for IP transactions, the types of applications in use, the content of transactions and, critically, metadata that describes and maps details for rapid analysis of data relationships. More than 4,000 metadata attributes are available for analysis to improve visibility into network activity and rapidly correlate Internet users with specific transactions and behavior. In the case of NBAD systems, ixEngine provides a rich detailed view of the traffic within any environment, with full search and replay capabilities. It fills a gap that most high-level security tools do not meet: the ability to search forensically through all network conversations for certain parameters, and extract the relevant information, including payload. The data extracted by ixEngine can be easily indexed for quick retrieval should an investigation be necessary from stored data, as well. In addition, the real-time indexing and filtering of only relevant information as it travels over the network leads to optimized (and lower cost) storage requirements. Network Intelligence technology’s ability to parse traffic and session information also increases the speed and effectiveness of investigations.
Protocol decoding up to Layer 7 with Qosmos ixEngine enables complete visibility of all network traffic and applications, independently of ports. As an addition to systems that analyze logs, Qosmos provides the ability to search collected metadata such as URLs, cookies, services on non-standard ports, etc. This provides a richer view into the data captured, shortening search times considering. For example, just looking for a specific URL believed to be exploiting a web server, and not knowing the IP addresses of the source or time frame within the vast system of a typical SaaS provider would require searching through entire payloads of data, potentially taking hours. Searching through layer-7 metadata would reduce this time to mere minutes.The extracted metadata can be mixed with log information for easy indexing and faster retrieval within storage systems. In addition, ixEngine is perfectly scalable, with multi-core architecture support to increase packet processing performance, and allow for throughputs up to 80 Gbps, improving response time and efficiency.
CONCLUSION:
It would take years and considerable expense for vendors to develop capabilities similar to Qosmos ixEngine on their own. As an enabling technology, it significantly reduces the time and cost to storage and search vendors to achieve the substantial economic and operational benefits of Network Intelligence technology in their offerings. Available as a software development kit, Qosmos ixEngine can be used by these vendors, as well as SaaS and cloud providers, to accelerate the delivery of more precise, secure and intelligent applications and services.
Qosmos
Immeuble Le Cardinet
5, impasse Chalabre
75017 Paris - France |
