PacketSentry Overview

PacketMotion delivers real-time control of insider threats by capturing user transactions at an unprecedented level of granularity and applying your policies to that data. The PacketSentry appliance employs patented deep packet analysis technologies and multi-core processing power to convert network traffic into succinct, actionable records of user activity at LAN-speed. The solution leverages identity, directory and application intelligence to facilitate monitoring, search, policy creation, alerting, reporting and controlling user actions with complete business context, enterprise-wide.

The result is a centralized record of access and actions that provides the means to know who is on the network (by user or organization), which systems they are accessing, and what applications and information they are using – beyond flow trends and instances of IP addresses, ports and session data. The same policies can also provide cross-organizational control as to what information assets a user can access once they are on the network – down to the database, e-mail folder, directory and filename. With PacketSentry, organizations:

gain comprehensive visibility
prevent resource and information access risks
validate compliance controls, and
accelerate governance processes

PacketMotion Approach

PacketMotion listened carefully to its clients’ pressing internal security challenges and designed a robust product family — PacketSentry™ — that allows network security to be managed from a business and identity perspective, rather than by packets and ports. The result provides IT and security organizations comprehensive visibility and control of users and assets.

PacketMotion Approach
[+] Enlarge

PacketMotion delivers real-time control of insider threats by capturing user transactions at an unprecedented level of granularity and applying your policies to that data - at wire-speed, enterprise-wide. The PacketMotion solution:

Provides granular, deep packet analysis captures, decodes and correlates user activity and enforces information asset access policies in real-time at LAN-speed
Offers real-time visibility and control that is cross-platform and unobtrusive - without employing agents, receiving flows, or aggregating logs
Presents full transaction details of employee, contractor and unknown user access to critical data center assets – beyond flow trends and instances of IP addresses, ports and session data
Binds user identity to business-level transactions across servers and applications down to the specific database table, email, messages, directories and files the corporate network
Integrates with Active Directory imports, monitors and automatically applies directory object changes to respective PacketSentry monitoring details, rules, alerts, reports and dashboards
Delivers robust reporting and rules engine with built-in templates to reduce the time and costs of monitoring, compliance and control validation, policy management, security investigations, and operational audits
Strengthens acceptable use policy (AUP) through a browser interface that provides centralized, cross-organizational control as to what information assets a user can access once they are on the network
Delivers meaningful, actionable rule-based analytics via alerts, reports and dashboards