RSA NetWitness Concentrator and Broker

RSA NetWitness Concentrator and RSA NetWitness Broker are high-performance, Linux-based network appliances that extend the reach of RSA NetWitness across your enterprise and facilitate real-time and historical analysis, reporting, and alerting.

Concentrator and Broker aggregate and analyze comprehensive network and application-layer detail across multiple capture locations and make it available for analysis by RSA NetWitness Informer, RSA NetWitness Investigator, and RSA NetWitness Spectrum.

RSA NetWitness Concentrator and Broker

Index metadata extracted from network traffic across the RSA NetWitness infrastructure for enterprise-wide querying and real-time analytics while facilitating reporting and alerting.

NetWitness Concentrator

Concentrator aggregates data across clusters of RSA NetWitness Decoders in real time.

Concentrator is designed for hierarchical data aggregation for ultimate scalability and deployment flexibility across various organization-specific network topologies and infrastructures. As a result, Concentrators can be tiered in deployments to give visibility into multiple capture locations.

NetWitness Broker

In environments where multiple Concentrators are deployed, Broker acts as a single query engine to generate a real-time, hierarchical view across your entire network. Broker provides a single point of access to data and is designed to operate and scale in any network environment, independent of network latency, throughput, or data volume.

RSA NetWitness Use Cases

Organizations in a variety of market sectors have deployed RSA NetWitness solutions to solve a wide range of information security challenges.
  • RSA NetWitness Continuous Monitoring: Operate your controls within acceptable risk and compliance expectations.
  • RSA NetWitness Data Leakage: Protect your intellectual property with pervasive visibility into your network.

  • RSA NetWitness Incident Response: Know everything happening across the network to respond immediately to new threats with clear answers.

  • RSA NetWitness Energy: Secure your critical infrastructure from potential advanced attacks with an actionable understanding of everything happening on your network.

  • RSA NetWitness Financial Services: Secure your sensitive data by gaining full visibility and receive regulatory compliance reports on a variety of categories pertinent to you.

  • RSA NetWitness Government: Secure your sensitive data by gaining full visibility and receive regulatory compliance reports on a variety of categories pertinent to you.

  • RSA NetWitness Healthcare: Protect patient information from advanced threats and their associated risks by understanding who and what are on your network.

  • RSA NetWitness High Tech: Actively monitor your intellectual property from cyber criminals by recording everything happening on your network and increase your security measures.

  • RSA NetWitness Retail: Know and see everything happening on your network at any time with a platform providing full visibility to identify and monitor advanced threats.

RSA NetWitness Applications

The RSA NetWitness application suite provides a powerful analytical workbench to investigate incidents, identify advanced threats on your network, and answer security questions.
  • RSA NetWitness for Logs: Deliver innovative security analytics in a merged view of network and log data sources with external threat intelligence over a scalable platform.

  • RSA NetWitness Informer: Provide enterprisewide visualization, alerting, reporting, and trending for every session, communication, service, application, and user activity.

  • RSA NetWitness Investigator: Perform real-time, free-form contextual analysis of network data captured and sessionized by RSA NetWitness.

  • RSA NetWitness Live: Accelerate your security operations center by minimizing the time it takes to identify, assess, and respond to incidents and advanced threats.

  • RSA NetWitness SDK/API: Develop any application that leverages the RSA NetWitness network capture infrastructure and application framework to solve unique IT risk challenges.

  • RSA NetWitness SIEMLink: Enable instant integration of the RSA NetWitness network-monitoring platform with SIEM and other existing enterprise security technologies.

  • RSA NetWitness Spectrum: Extract every executable automatically and analyze utilizing distinct investigation techniques for identification of malware, APTs, and zero-day threats.

  • RSA NetWitness Visualize: Render any object such as audio, documents, images, and video on the network for security visualization and interrogation over large data volumes.