Security News > 2020 > March > Scouting the Adversary: Network Sensor Placement Considerations

Scouting the Adversary: Network Sensor Placement Considerations
2020-03-04 14:56

So how can security organizations improve their visibility? One of the most impactful changes they could make is to re-evaluate their network sensor placement.

Sensors report network alerts and metadata to your on-premises Network Enterprise appliances or to the remote Network Cloud.

A sensor placed inside a network firewall can see only the traffic that is allowed past the firewall, or internal traffic that stays entirely within the firewall.

Proper sensor placement ultimately helps optimize time, allowing analysts to focus on the events that matter, and thereby increasing the chances for teams to better defend their networks.

Correlating seemingly unrelated network activity and behavior: By applying automated hunting and security analytics to retrospective metadata gathered by sensors during every network session, analysts can correlate seemingly unrelated network activity.


News URL

http://feedproxy.google.com/~r/Securityweek/~3/Kt4BGGPI1nU/scouting-adversary-network-sensor-placement-considerations