IBM Proventia Network Anomaly Detection System
IBM Proventia Network Anomaly Detection System (ADS) is a network behavior analysis system. It enhances your network intelligence and security by auditing network flow data from existing infrastructure devices.
This solution delivers a clear view of your network's behavior
while automatically detecting:
- active security threats
- risky user behaviour
- performance issues
- noncompliant activities such as policy violations and unapproved network changes.
Security for Your Internal Network
With Proventia Network ADS, network behavior and performance become core components of a successful security strategy. The result? Your network can be flexible and performance driven, while you attain better visibility, integrity and protection of critical IT resources.
You benefit from:
- Enterprise-wide visibility into your network and applications.
- Monitor ports, services and applications on the network for unusual activity.
- Automatically analyze network and asset changes and their impacts on network performance, traffic profiles, new hosts and services.
- Pinpoint network and security issues quickly, control network usage and limit risk of propagating infections.
- Improved integrity with a solution that finds and corrects weak links
in your network.
- Harden the network by eliminating unused, unauthorized ports and services without affecting your most critical services and assets.
- Lock down segments and groups of users to prevent insider misuse and the spread of worms, while reducing downtime and cleanup costs.
- Demonstrate that internal controls are implemented and being followed.
- Produce detailed reports that can assist with simplifying regulatory compliance.
- Protection from evolving threats.
- Protect against evolving threats (worms, pre-attack scans, Trojans, backdoors, rogue services, botnet traffic, phishing and more) with comprehensive internal detection and prevention.
- Continually updated with the latest network behavioral intelligence.
- Protect availability and performance by detecting sudden shifts from baseline traffic and drops in traffic on critical servers and links.
- Detect inappropriate access to resources and behavioral violations of specified polices.
