Endace InvestigationManager

New with OSm 6.5, InvestigationManager is a lightweight but exceedingly powerful, virtual server application that allows rapid search and data-mining on multiple EndaceProbe™ Analytics Platforms simultaneously. Using InvestigationManager, analysts can conduct searches across groups of EndaceProbes, or even all the EndaceProbes in an EndaceFabric™, simultaneously. Benefits:

• Rapid, network-wide investigations across an entire EndaceFabric. This fabric may consist of geographically distributed EndaceProbes and/or groups of EndaceProbes that have been stacked to form logical EndaceProbes with multi-petabyte storage capacity and packet capture rates of 100Gbps and beyond

 

• Amazingly fast search times. A needle-in-a-haystack search2 across mutiple EndaceProbes and stacks containing petabytes of network history typically takes less than a minute regardless of the number of appliances being searched

 

• Automation of investigations across multiple Endace appliances, a “single pane of glass” view, and amazingly fast search times dramatically increase analyst productivity

 

Components of an EndaceFabric To ensure end-to-end visibility, EndaceProbes are typically deployed in various locations across the network, often at points of interconnect with the public internet, subnetworks, branch offices and private data centers. The EndaceFabric architecture solves the challenge of managing large numbers of distributed EndaceProbes and performing investigations that span multiple physical EndaceProbes at the same time. EndaceCMS™ Central Management Server enables centralized administration of the fabric, such as user account management, software upgrades, appliance configuration, and health monitoring.