News
ExtraHop Unveils Immersive Maps of the Digital Enterprise
September 2017 by Marc Jacob
ExtraHop announced the general availability of ExtraHop 7.0. With this release, ExtraHop introduces live activity maps for complete 3D interaction with the hybrid IT environment; enhanced threat anomalies and machine learning-initiated workflows for performance and security; and perfect forward secrecy (PFS) decryption at scale to support next-generation security architectures.
In the enterprise, slow time is the new downtime, and performance and security issues are now existential threats. Even as enterprises demand more speed, scale, and functionality, IT has lacked the visibility it needs to ensure consistent performance and security. With ExtraHop 7.0, organisations can accelerate remediation of performance and security issues by visually identifying and investigating anomalous behaviour; answer audit and compliance questions via visual representations of device communications and dependencies; monitor PFS-encrypted traffic at scale so that organisations don’t have to choose between security and visibility; and easily share relevant data and insights across multiple teams.
New features in ExtraHop 7.0 include:
? Live activity maps: With live activity maps, ExtraHop delivers a complete 360 degree visualisation of the entire IT environment, from on-premises to the cloud. Moving beyond static block diagrams or simple network topology maps, live activity maps enables IT operations and security teams to accelerate investigations by exploring a visual map of all device and application communications, including real-time and historical views. Users can zero in on incidents and anomalies by filtering or excluding devices, and drill down into the transaction records with one click. Live activity maps also support business-critical initiatives like cloud migration, datacenter consolidation, and regulatory compliance.
? ExtraHop Decryption Suite: ExtraHop now extends SSL decryption capabilities to support PFS, the emerging standard for privacy and security encryption. With first-to-market PFS decryption capability, security teams can implement best-in-class security and compliance measures without compromising critical visibility for network and IT operations teams.
? Addy security anomalies: ExtraHop Addy now automatically detects and alerts on more types of suspicious behaviour, including network scans, data exfiltration, and unusual file server access.
? Anomaly-initiated workflows: ExtraHop Addy’s machine learning detects and alerts on performance and security anomalies automatically, leveraging ExtraHop Open Data Stream technology to enable rapid incident response and remediation. With anomaly-initiated workflows, users can automate the response to alerts for specific events in ServiceNow, Cisco Tetration, and other third-party systems.
? Click here to learn about other new features in 7.0, including application definition experience and scheduled reports.
