News
Immune System Extends to Virtualized Environments with Darktrace Vsensors
February 2016 by Marc Jacob
Darktrace has announced that it now works in virtualized environments, with the launch of Darktrace’s ‘vSensor’ virtual appliance.
Darktrace’s flagship Enterprise Immune System is powered by machine learning and mathematics developed at the University of Cambridge, and allows organizations to identify in-progress cyber-threats, including insider threat, in real time within the network. With the launch of Darktrace vSensors, this self-learning technology has now been extended to virtualized environments, increasing organizational visibility and enhancing the ability to detect subtle and long-running anomalous activity.
Darktrace’s vSensors are virtual appliances configured to receive a SPAN for the virtual network switch. Easily installed within a virtual machine, they allow for the intelligent capture of traffic between virtual machines (VMs), without a single packet being lost. Only relevant metadata is extracted, with 1% of raw network traffic ingested being sent to the master Darktrace appliance, for analysis.
Benefits:
Easy to install
Captures 100% of inter-VM traffic
Extracts only relevant metadata
Optimizes disk space by storing packet capture on a rolling basis
Minimal impact on server performance
Fully scalable
Darktrace vSensors are a critical capability for organizations with multiple virtual machines in owned hardware servers, and organizations with multiple remote locations. For the first time, it gives the Enterprise Immune System the ability to see data moving within these locations and strengthens Darktrace’s visibility of all digital interactions.
