Benefits

• Makes all unknown endpoints known
• Improves incident response time through real-time alerting
• Detects unauthorized rogue endpoints connected to the enterprise network
• Monitors continuous stealth operation that eliminates risk of detection and blocking by endpoints
• Administration through intelligent alert throttling that eliminates alert flooding
• Comprehensive central reporting with summary and predefined reporting
• Overlapping surveillance coverage provides built-in redundancy for reliability and extra security
• Integration with ENDFORCE Enterprise and simple exemption interface eliminating false positives

ENDFORCE Informant™ Features

ENDFORCE Informant provides silent network monitoring that detects and alerts enterprises when unknown and unauthorized (rogue) endpoints attempt to connect to the network.

Monitoring and Alerting to Make Unknown Endpoints Known

ENDFORCE Informant uses a combination of passive network monitoring and advanced correlation and alerting systems. Redundant software-based Monitors use passive ARP (Address Resolution Protocol) monitoring to detect network hosts. Intelligent Correlators process data from these authorized Monitors to identify rogue endpoints.

This highly secure software-base framework provides real-time alerting on endpoints that are not authorized to be using the network. Early warning from ENDFORCE Informant gives administrators the time and critical information required to eliminate these high risk endpoints from the network.

View larger image