QRadar Application Activity Monitors

Application Aware network monitoring enables stateful information about all conversations at the application layer and provides a more thorough understanding of complex applications including voice over IP (VoIP), Multimedia, ERP and database. QRadar Application Monitor gathers knowledge from a deep examination of every packet within a conversation and provides a more detailed application level context. This information, when correlated with network and security events, enables a more advanced analysis of the overall security posture of the network.  Furthermore, the application content that is captured provides key forensic data and evidence for analyzing the true impact of threats - notably those that include potential data leakage.

Appliances - Advanced security intelligence with total application layer visibility:

QRadar QFlow Collectors offer a cost-effective solution for gathering the most sophisticated and actionable network activity data. QFlow Collectors go beyond traditional flow-based data sources to enable application-layer network activity analysis, anomaly detection and configurable packet/content capture.

QFlow collectors collect network traffic passively through network taps and span ports and can detect over 1000 networked applications such VoIP, Social Media, and P2P.

QRadar 1101 QFlow Collector

The 1101 QFlow Collector is a cost effective collector for providing in depth network and application visibility into lower bandwidth (less than 100mbps) to remote locations.

QRadar 1201 QFlow Collector

The 1201 QFlow Collector provides a mid range multi-port collection appliance for underutilized Gigabit Ethernet connections (under 500 mbps).

QRadar 1202 QFlow Collector

The 1202 QFlow collector appliance provides line rate gigabit network performance and multi-port flexibility. The 1202 is well suited for collecting and monitoring high rates of network traffic at the data center and core of an enterprise.

QRadar 1301 QFlow Collector

The 1301 QFlow collector appliance provides line rate gigabit network performance and multi-port flexibility and fiber connectivity. The 1301 is well suited for collecting and monitoring high rates of network traffic at the data center and core of an enterprise..

QRadar 1302 QFlow Collector

The 1302 QFlow collector appliance provides line rate gigabit network performance and multi-port flexibility and fiber connectivity. The 1302 is well suited for collecting and monitoring high rates of network traffic at the data center and core of an enterprise.

QRadar 1310 QFlow Collector

The 1310 QFlow Collector delivers advanced network and application visibility and collection on 10G networks.