ネットモン

Monitor your organization’s network traffic and gain real-time visibility into your LogRhythm or New-Scale Security Operations Platform deployment.

デモのリクエストデータシートを読む

4700+

真のアプリケーション識別

10Gb/s

ネットワーク検査速度

2.5Gb/s

ネットワークキャプチャ速度

ネットワークの可視性

Identify Suspicious Activity Quickly

NetMon identifies and categorizes traffic from nearly 5,000 applications using True Application Identification advanced classification and deep packet inspection.

Packet metadata captured from every session
Layer 3–7 packet capture in industry-standard PCAP format
REST API support for custom integrations and automation

リスクモニタリング

Automate Threat Detection

Use ready-made rules or tailor Deep Packet Analytics (DPA) scripts to your environment. Saved searches, automated alerts, and customizable dashboards help you stay ahead of issues, while SmartCapture™ preserves the packet details you need for accurate investigations.

強力な検索機能

Accelerate Investigations

Search across packet and flow data to surface what you need faster. Rebuild email attachments for malware analysis and monitor for data movement that could indicate risk.

ネットワークアクティビティを把握する

Apply Deep Packet Analytics

DPA builds on the NetMon Deep Packet Inspection (DPI) engine to interpret traffic at scale, including detection of PII, credit card information, port and protocol mismatches, and other indicators of compromise.

まずは専門家にご相談ください。

お問い合わせ

よくある質問

NetMonの導入方法は？

NetMon is available as an appliance or a virtual machine within your network. You can add it to New-Scale or LogRhythm SIEM deployments.

NetMon は Exabeam と完全に統合されていますか？

Yes. NetMon acts as a log source for LogRhythm SIEM and New-Scale deployments, analyzing traffic and extracting key attributes such as application, IP addresses, and traffic volume. LogRhythm SIEM can access PCAPs directly from NetMon for faster response. New-Scale Platform users can incorporate NetMon data into the platform interface, with a dedicated NetMon interface available for deeper visualization.

ディープ・パケット・アナリティクス（DPA）とは？

DPA expands on DPI to provide detailed visibility into network traffic, identifying sensitive data, protocol anomalies, and other signs of inappropriate movement. It continuously correlates packet payloads and metadata using prebuilt or custom rules, allowing you to automate detection previously limited to manual packet review.

ディープ・パケット・インスペクション（DPI）とは？

The DPI engine identifies and categorizes thousands of applications and populates thousands of metadata fields. It extracts Layer 3-7 data using pattern matching, heuristic modeling, and signature-based methods.

SmartCaptureとは？

SmartCapture automatically captures sessions based on application attributes or packet content. This targeted capture reduces storage needs while preserving the information required for effective investigations.