Traditional security solutions struggle with a landscape where attacks continue to evolve beyond malware - supply chain threats, insider attacks, and living off the land tactics, among others. At the same time, a new network has emerged with unmanaged Internet of things, cloud infrastructure, contractor and third-party devices, and shadow IT. While the new network continues to gain precedence and transcend enterprise perimeters, it has become vital for organizations to address the cascading attack surface and to build an integrated cybersecurity strategy that delivers holistic visibility and control. Arista is uniquely situated to address the security gap given its position at the foundation of the network. Implementing security at the network layer, it eliminates the need for layer over layer of network security technologies and thus reduces operational costs and complexity. This approach represents the most effective way to track and successfully manage threats given the wide attack surface.
The Arista NDR platform is built on a foundation of deep network analysis from AVA Sensors that span the "new network" - including the data center, campus, IoT as well as cloud workload networks, and SaaS applications. These sensors come in various form factors from being built into Arista switches as well as standalone hardware, virtual, and cloud sensors. Unlike other network detection and response solutions, Arista NDR parses over three thousand protocols and processes layer 2 through layer 7 data. The platform also analyzes encrypted protocols to identify important context such as the nature of traffic, the applications communicating, and the presence of remote access, all without forcing data decryption. Arista's EntityIQ technology uses this information to autonomously profile entities such as devices, users, and applications while preserving these communications for historical forensics.
