NetScout's Arbor Networks cybersecurity play shows fruit

NetScout is a networking and security software vendor with a unique position in an enterprises network.

At the heart of their portfolio is their InfiniStream product, which collects massive amounts of data from throughout an enterprises' networking and security infrastructure.

In 2015 NetScout seriously entered the cybersecurity category with their acquisition of Arbor Networks.

The combined vendor has been busy over the last few years stitching its products together so that it's cybersecurity solutions can uniquely leverage their information and intelligence products.

"There is a renewed interest in the use of network data for security analytics and operations," said Jon Oltsik, Senior Principal Analyst and Fellow, Enterprise Strategy Group (ESG). "NetScout can make network security data affordable and consumable. Its ASI technology, with the addition of threat intelligence feeds, can help organizations detect IOCs and accelerate post forensic workflows. NetScout offers these capabilities while adding value to security infrastructure by integrating into existing ecosystems and workflows through APIs to SIEMs (including Splunk dashboards)."

At the same time, the company has moved to be a software business and woven cloud and multi-cloud technologies throughout its portfolio.

Their most recent move has been the introduction of Arbor Threat Analytics (ATA)

Arbor Threat Analytics is built on the ISNG visibility platform, which has been designed to be deployed anywhere, from on-prem 10-100Gbit links to individual workloads.

From metadata to conversation flows, session records, and ultimately packets, NetScout provides visibility for IT professionals to reduce risk in their increasingly complex environments. With the ability to detect issues behind the firewall and throughout the network, Arbor Threat Analytics allows security analysts to respond to threats quicker and with greater accuracy.

ATA sees the integration of NetScouts Adaptive Services Intelligence (ASI) traffic monitoring technology with their ATLAS Intelligence Feed. Machine learning techniques are also being applied to help sort through the vast amount of information being collected.

"Our commitment to providing the most actionable and high-fidelity information to IT teams has now been extended to the security teams," said Paul Barrett, Enterprise CTO, NetScout. "While the use of packet data has long been a part of security workflows, our ability to convert packet data into actionable metadata speeds the response of security teams. Leveraging our technology, deployment models and expertise, IT can reduce risk through our ability to provide visibility anywhere."

Customer feedback

"Threat Analytics is a great example of how our NetScout portfolio works together to benefit our current and future customers. The feedback from these customers has been exceptional and inspiring since introduction. We have seen wide adoption and many successful deployments and proof of concept and value are underway." said Paul Kraus, VP Engineering Cybersecurity, NetScout