Joint Forces Sensor - Multi-Application Cyber Security Monitoring & Forensics Appliance
OVERVIEW |
The CyWarfius® Joint Forces Sensor provides powerful and flexible data manipulation capabilities for network monitoring and forensics analysis. Once each packet is time stamped, it then can be replicated or load balanced. Data replication allows multiple applications to analyze the same data stream at the same time. Time stamping ensures accurate replay of the data as well as assisting with forensic analysis. Our proprietary string search algorithm coupled with the ability to correlate 802.11 activity with Internet sessions provides further intelligence capabilities for IM, SMTP, and signal analysis. For CPU intensive applications such as IDS, the data stream is load balanced across multiple CPU cores to increase performance with 100% packet capture at line rate. Thereby, capturing or forwarding reconstruction of pcap session from the beginning is realized. |
|---|---|
|
|
The Joint Forces Sensor, powered by Endace DAG technology, is the first platform designed to acquire, record, analyze, filter, modify, send, and store data, while delivering real-time flow statistics and full packet payloads to independent monitoring applications. Clustering an array of sensors, while monitoring multiple devices (up to 64) with one interface, allows for prefiltering on multiple modules at the same time effecting the load distribution to identify and move traffic needed at unprecedented speed. With a combination of rich network testing and security testing, lawful intercept is achieved over GigE, 10GbE, OC3, OC12, OC48, OC192, and 802.11 networks. Line rate stateful filtering of internet traffic is used to link and speed adapt current systems to 10GB and optical networks. In bandwidth reduction mode you capture and forward only traffic containing certain criteria. The deep packet inspection utilizes a proprietary string search up to a 100K word dictionary. The TCP, IM and SMTP session reconstruction and replay offers further analysis. Storage configuration offers multi-terabyte RAID/JBOD and can interface with external storage architecture for large data storage/archival requirements. Joint Forces Sensor (JFS) is a scalable hardware platform combined with security software configured under a hardened real time Unix environment. Available in varied configuration from 1 U to 4U, aTCA, Compact PCI, optional 19x14 form factor, up to 96GB RAM, up to 32 internal disks, optional solid state mass storage and NAS/SAN support, including field deployable, ruggedized packaging, the JFS can scale to any requirement. In addition, the JFS is capable of running simultaneous libpcap applications including TCPDUMP, WireShark®, YAF, Snort® or Suricata by load balancing to multiple CPU cores. Hardware Technology
|
|
|
Lower cost means affordable clustering. Joint Forces Sensor is a cost effective, COTS based solution with a reduced total cost of ownership by eliminating stovepipe deployments, and reduced power, cooling and maintenance. All CyWarfius modules can be clustered using standard Ethernet switches, and adapt to enterprise SAN or NAS network file servers and offers an intuitive Windows GUI. These benefits reduce administrative overhead, lowers cost as it integrates with existing solutions, enhances network performance, and the ability to plan targeted cleanup. |
|
Unprecedented Affordability Joint Forces Sensor combines next generation hardware with intelligent flexible cyber warrior® software for monitoring and capturing traffic on your network to make critical network security decisions and proactively take actions to resolve system vulnerabilities. Utilizing commercial off-the-shelf components drastically reduces cost of ownership. |
|
Available from Shorty 1U to Full size 4U - download the full data sheet for additional information |
| < Prev | Next > |
|---|
