Network Insight

What is Network Insight?

Gain complete visibility into network threat-related activities.

Core Network Insight (formerly Damballa Failsafe) is an advanced threat detection system that automatically and accurately identifies hidden infections in real time in live traffic. Building on more than a decade of scientific research and big data visibility, Network Insight is a mature, purpose-built solution that provides definitive evidence to help respondents quickly avoid loss. While networks, DNS requests, and global malware patterns can be monitored by other means, Network Insight can provide new, historical surveillance in one place.

A solution without us to identify infections

Do you know the status of all the devices in your organization? Most security products protect only a fraction of all endpoints or require the installation of an agent to monitor them. This leaves many devices unattended, including: security cameras, video conferencing units, MRIs, CT scanners, SCADA systems, or even connected coffee makers and refrigerators. Network Insight is agent-agnostic, as well as operating system and platform agnostic, covering each and every device on your network.

No more alert fatigue

You'll only listen to Network Insight when it's time to take action. When Core Network Insight confirms that a device is infected with advanced persistent threats or malware, it presents a complete case of evidence, prioritized by risk. This eliminates false positives, leaving only serious alerts that are not hidden among thousands of benign notifications.

A threat catalog

Core Labs and Network Insight sensors gather valuable data on any number of threat types in order to detect infections with certainty. This critical information is also gathered into a threat database that users can access at any time. Search by name or characteristic of the threat and find out all the necessary details. Get general information such as threat summaries, severity levels, and research findings from Core Labs, as well as personalized information, including the activity your assets have had with suspicious domains.

Prevent what you can, detect what you must

Cybersecurity strategies often focus on prevention, which is a critical component of network security, but it's not the only activity to consider. In today's world of advanced threats, the benefits of detection solutions like Network Insight are equally clear and crucial:

Shorten the dwell time of infections

Our network device automatically and accurately detects active but hidden infections within hours, minutes, and seconds, rather than the weeks it takes an organization on average to find an infection.

Reduce the risk of damage

The longer an infection spends on your network, the more damage it can do to your IT environment. Quick detection is the key to quick removal.

Save time and resources

When Network Insight determines that an infection is NOT present, it automatically closes the case.

Main features

Analyze behaviors and confirm threats

Analysis of network behaviors, malicious payloads, threat actor, and Advanced Persistent Threat (APT) activity. Verify the evidence by passing information to an automated Case Analyzer that corroborates the evidence. Once true infections are confirmed, the risk classification applies.

Usable panels

Get visual views of the Network Insight system, with data such as currently infected assets, infected assets at higher risk, reinfected assets, and infected assets over time. Adapt dashboards to get multiple views, presenting different information as needed.

Alerts and integrations

Network Insight can pair with other tools to maximize cybersecurity. Instantly notify response teams via SIEM, SYSLOG, or email. Automatically create tickets on systems such as Service Now or Jira Service Desk. Reduce remediation time by integrating with enterprise infrastructures like Checkpoint, Palo Alto, or Carbon Black.

Comprehensive reports

Generate report types for different audiences with all the information you need. Get overviews in executive reports, detailed details with incident responses, and assess your organizations' infection management with infection lifecycle reports.

System Requirements:

CPU: 1.8 GHz dual core processor

RAM: 2 GB

HDD/SSD: 50 GB of free space on main drive

Operating system: Microsoft Windows 8 32-bit, Microsoft Windows 7 32-bit, and Microsoft Windows Vista 32-bit

Resolution: 1024×768