genua, a German specialist for IT security ahas selected the Enea Qosmos ixEngine as the embedded network traffic classification engine for its cognitix Threat Defender platform.
The cognitix Threat Defender is an innovative Network Threat Detection and Response (NDR) platform that combines the best known-threat protection capabilities of Intrusion Detection and Prevention Systems (IDS/IPS) with defense against unknown threats through unique Network Traffic Analysis (NTA) capabilities.
To identify unknown threats, like new malware, advanced persistent threats and zero day attacks, the cognitix Threat Defender performs inline, real-time correlation that reveals hidden behaviors, patterns and threats, by connecting security and network events across time and flows and analyzing them using models of user, device and threat behavior.
This combination of reactive and proactive capabilities, and its lightweight, programmable architecture, make it an integral component of genua's Security Defined Network solution, which uses network segmentation, managed decentralization of rules definition and enforcement, and NTA to balance the demand for high application and data availability with the need for ultra-reliable protection of critical assets.
To ensure maximum performance for the IDS/IPS and NTA functions within the cognitix Threat Defender and the Security Defined Network framework it supports, genua needed an industrial-grade traffic classification and metadata engine that would provide the most comprehensive, accurate and reliable L2 to L7 packet and flow data available, along with essential insights into evasive and encrypted traffic, while transferred data remains encrypted and confidential, said Enea.
Arnold Krille, Head of Development for cognitix Threat Defender
As networks have evolved, it has become critical to implement intelligent network security as a second line of defense to existing endpoint- and perimeter-based threat detection and response systems.
Jean-Philippe Lion, SVP of the DPI Business Unit, Enea
For the past twenty years, we have dedicated ourselves exclusively to delivering the most accurate, comprehensive traffic visibility possible so that our telecommunications, networking and cybersecurity vendors could continuously innovate and thrive in competitive, constantly-evolving markets.
