Guarded Glass Network Sentry – Advanced Network Visibility and Threat Detection
Elevate your network security with advanced packet capture and intrusion detection. Guarded Glass Network Sentry builds upon the Base module, providing flexible full packet capture (PCAP), automated intrusion detection (IDS), and Detection-as-Code to give security teams deep visibility into network traffic. With centralised analysis and automated correlation, analysts can quickly identify, investigate, and respond to threats with greater precision.
Key Benefits
All the benefits of the Base module, plus:
-
Flexible Full Packet Capture
Capture network traffic from multiple sources, both physical and virtual. Retain packet data for extended periods (subject to storage capacity) to support deep forensic investigations.
-
Centralised PCAP Analysis
Search, filter, and analyse PCAP data across all network sources in one place. Gain a comprehensive view of traffic flows, connections, and anomalies across the enterprise.
-
Intrusion Detection System (IDS)
Leverage industry-standard IDS tooling to monitor network traffic at high throughput, detecting and alerting on suspicious activity in real time.
-
Automated PCAP Correlation
IDS alerts are automatically correlated with relevant packet capture data, enabling faster threat validation, triage, and response with minimal manual effort.
-
Detection-as-Code Rule Management
Centrally manage and deploy IDS rules across all sensors. Seamlessly integrate commercial, private, and custom threat signatures, track rule changes, and automate approval and deployment workflows.
Features of Guarded Glass Network Sentry
- Elastic Search – High-performance indexing and search capabilities for network data.
- Case Management – Organise and track network security investigations efficiently.
- Detection-as-Code – Automate and control IDS rule management for greater agility.
- IAM/SSO – Seamless authentication and access control integration.
- Vectr Purple Team Platform – Integrate with adversary emulation and detection validation tools.
- Full PCAP – Retain and analyse raw packet data for forensic analysis and threat hunting.
- Intrusion Detection System – Real-time network monitoring and attack detection.
Take Control of Your Network Security
Guarded Glass Network Sentry provides the visibility, automation, and detection capabilities security teams need to proactively defend against network threats. With full packet capture, real-time IDS monitoring, and automated correlation, you can accelerate investigations and reduce dwell time for malicious activity.