The StealthWatch FlowSensor from Lancope, the leader in flow collection and analysis, uses a combination of deep packet inspection (DPI) and behavior analysis to identify applications and protocols in use across the network - no matter if they are plain text or use advanced encryption and obfuscation techniqStealthWatch FlowSensor AEues.
Through a combination of behavior analysis and deep packet inspection, the StealthWatch FlowSensor identifies applications and protocols in use across the network and gathers packet-level performance statistics at a fraction of the cost of traditional probe-based devices. Lancope also provides URL information in flow records to more easily identify which applications are causing performance or security problems. The FlowSensor can be installed easily in both physical and virtual environments, and plays a key role in troubleshooting application performance problems and security incidents.
Application performance monitoring
Providing true Layer 7 application visibility, the FlowSensor gathers application information, along with packet-level performance statistics. With unmatched scalability, the FlowSensor provides the all-encompassing visibility needed anywhere from branch offices to 10G data centers at a fraction of the cost of traditional probe-based devices.
Diagnose performance issues: application vs. network vs. security
Without knowing what is typical for application and network performance in physical and virtual environments, network and security teams cannot proactively determine when latency is a problem. The FlowSensor gathers packet-level performance statistics, which StealthWatch analyzes to build a baseline of application and network performance. If performance degradation occurs, StealthWatch automatically alerts operators and helps isolate the root cause within seconds to a specific application, network or security issue.
Advanced URL data
Lancope also provides URL information in flow records generated by the FlowSensor. Previously unavailable from most flow sources, URL data enables administrators to see exactly which web sites users are going to, as well as the file path, to more easily identify which applications are causing performance or security problems. Administrators can identify both the hostname of the server, as well as any error messages within the flow, for faster network troubleshooting.
Complete, scalable packet-level visibility from branch offices to 10G data centers
The FlowSensor is available either as a lightweight 1U appliance or as a virtual image. The available appliances include the compact form-factor FlowSensor 250, which offers a throughput of 100 Mbps for lower bandwidth areas of the network, and scale up to the FlowSensor 3000 for monitoring 10G networks.