Branch Protection via Cisco’s Stealthwatch Learning Network License – Part 2

The Learning Agent employs Cisco NetFlow and Deep Packet Inspection (DPI), and Network Based Application Recognition (NBAR); abilities which are at present in all Cisco branch routers, to gather, associate, and scrutinize security data to implement cutting-edge irregularity and zero-day attack identification. There is a well-defined Flexible NetFlow record in the router installation which forwards that information to the agent running in the router’s memory.

A crucial Learning Network feature is the solution’s capabilities to adapt; to find new irregularities and functioning with an operator to do fix them on the spot by recognizing the irregular features and generating and applying extenuations for circumstances as they arise. This level of automation is actually required due to how intricate and capacious traffic torrents and movements are becoming.

Old-style irregularity and incursion discovery and deterrence are resilient at catching threats which are already known and recognizable. They are not able to find new risks as they are heavily reliant on what they have been programmed to know and not what they learn as events are unfolding in real time.

One more benefit of the Learning Network as compared with old-style protection solutions is its level of accuracy. Traditionally, irregularity discovery systems have been rated based on the amount of possible security happenings they are able to find. Given that many of these incidents turn out to be non-risks based or unrelated, old-style systems need regular fine tuning or else they will produce large numbers of needless warnings and commotion.

The Cisco Stealthwatch Learning Network concentrates on keeping its findings accurate and only warning you and taking action on events which pose real threats confirmed by an operator, with simple Like/Dislike feedback features, enabling the Learning Network to find only pertinent irregularities.

It’s crucial to keep in mind that the learning manager functions independently from the Cisco Prime Network Management App. Therefore, it allows you to separate your protection processes from networking processes, which can be extremely beneficial, contingent on how your business is set up.

The Cisco Learning Network encompasses the abilities of Cisco’s market leading Stealthwatch Network Anomaly Detection (NBAD) and Visibility solution and both can be installed in the same Cisco ISR device.

The Cisco Learning Network can incorporate information from the Cisco Identity Services Engine (ISE) or access to Cisco Talos Threat intelligence feeds to give an operator even more data and more granular visibility.

The Cisco Stealthwatch Learning Network license transforms your ISR routers into security devices. The Learning network is not required to continually keep updating signatures or rules/lists. It learns what’s standard and what isn’t by acclimatizing itself with day to day traffic patterns. This provides you a much more dynamic, always up-to-date methodology to branch-office protection.

To learn more, please speak to our licensing specialists today.

Branch Protection via Cisco’s Stealthwatch Learning Network License – Part 1

Cisco is tackling the complications associated with network security by the deployment a new self-learning, router-based solution known as the Cisco Stealthwatch Learning Network License. The Learning Network functions inside a Cisco router and is capable of discovering and learning about your network and adapting as the network and the associated evolving threats to the network are faced.

The Cisco Stealthwatch Learning Network License employs a diverse variety of machine learning algorithms on premise (the router) to model standard activities and find irregularities inside the network. This employment of machine learning signifies a disrupting method to some of the usual issues of network security and incongruity identification. Different from security contrivances of the past, this method needs no exceptional configuration or programming of rules, access control lists, and signature libraries; rather, the learning agent powered router continually learns about network activities and traffic patterns and employing cutting-edge analytics recognizes irregular traffic. New and cutting-edge techniques are employed to radically minimize the identification of benevolent irregularities via an easy to use user feedback (Like/Dislike) mechanism, resolving one of the primary issues with irregularity discovery.  The Stealthwatch Learning Network License is able to rapidly learn the environment it is installed in and pinpointing pertinent irregularities with unmatched accuracy.

This Learning Network is the only solution obtainable that associates and combines machine learning with network content examination and packet-capture installed in a router to systematize branch traffic visibility, defense, and remediation. The Learning Network is software which is retailed as a smart license to the Cisco Integrated Service Router (ISR) 4000 branch-office router. It augments an adaptive component to your protection efforts, which are no longer reliant on finding threats that are already known. Rather, the learning network is focused on the relevance of irregularities; and having the ability to quickly react to modern day threat environment and Zero-Day Attacks.

Learning Network mechanisms are a learning manager and one or more than one router deployed learning agents installed at the brink of the network. A Learning Agent is virtual machine installed into a Linux Container running in memory on a Cisco ISR 4000 series router. These agents examine traffic, build models, and report irregularities in real time to the consolidated Learning Manager. You may install at the most one agent per router, and up to a maximum of 1000 agents which are able to communicate with a single manager inside your network. At the time of launch, the Cisco ISR 4451 and ISR 4431 routers are supported, with further platforms to be supported in the near future.

To learn more, please speak to our licensing specialists today.