Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Detecting anomalous levels of user downloads from a SAN

$
0
0

Hi j.dub

If your switch does not support NetFlow or if you want more granular information there is another option. We develop a product called LANGuardian which integrates with Orion. It uses network packets (SPAN\mirror port or TAP) as a data source. As well as getting traffic volumes and alerts you can drill down and see what files\directories are moving around your network and what user is associated with the activity. We have an online demo available (no registration required) at the link below which shows a sample of what can be done.

 

http://demo2.netfort.com/Orion/SummaryView.aspx?viewid=35&AccountID=guest

 

You can also check out the integration in the video below. This video is based on SolarWinds NPM but you can do similar things with LEM as it's all based on the Orion platform.

 

Hope this helps,

Darragh

 


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>