NetWitness Annual User Conference, Washington, D.C., November 4, 2009 -- NetWitness Corporation announced today the availability of version 9.0 of its award-winning NextGen™ enterprise network forensics and advanced threat intelligence platform at its Annual User Conference in Washington, D.C. The NetWitness user population includes over 15,000 security experts in more than 5,000 enterprises located in 126 countries around the world.
NextGen version 9.0 is not a simple evolution of a packet-sniffing technology, but a true revolution in automating network intelligence at the application layer and real-time network forensics.
"In 2009, we continued to see an alarming increase in the number of serious data breaches in public and private organizations due to advanced threats and the inability of security teams to detect complex application-based attacks using current tools and techniques," said Richard Stiennon, Chief Research Analyst, IT-Harvest. "With NextGen version 9.0, NetWitness has taken the nascent market of network forensics and real-time threat intelligence to a whole new level, providing deeper analytics and broader platform extensibility, and giving security teams the capabilities they need to reduce the risk exposure window."
The new features offered in version 9.0 include:
• NetWitness Identity - provides the ability to easily correlate IP addresses in network sessions to end-user directory credentials – fusing an organization's Active Directory to offer a real-time 4-1-1 lookup capability. As a result, security staff can link compromised machines and inappropriate network behavior to a user's actual identity.
• Support for 802.11 Wireless Capture - initially supported under the portable NextGen Eagle platform, this capability will be available on all NextGen 9.0 capture platforms. This new capability supports WEP in-line decryption and will support WPA decryption under an upcoming service pack.
• 10Gbps Network Support - building off of real-world experiences with massive government, commercial and service provider networks, unlike other products in this space, NextGen 9.0 includes support for both capture and real-time analysis on 10Gbps networks.
• Expanded authentication options - NextGen 9.0 supports Linux PAM, providing pluggable authentication modules that connect the NextGen infrastructure to customer authentication frameworks such as Kerberos for Windows and Unix environments, LDAP, Radius and many others. (continued...)
|