Skip to main content
Version: 26.1

Network Visibility

Goal​

Gain complete visibility of east-west and north-south traffic, with deep L2–L7 protocol analysis, application performance, and network performance monitoring.

How SentriaOne xSIEM supports it​

CapabilityContribution
Packet mirroringProvides a copy of real network traffic for passive analysis
Network Traffic AnalysisDecodes protocols from Layer 2 to Layer 7
Network Performance MonitoringMeasures throughput, connections, retransmissions, and latency
Application visibilityShows HTTP, DNS, TLS, database, and authentication activity and errors
Asset discoveryBuilds an inventory of devices seen on the network

Typical workflow​

  1. Confirm traffic is being received on Data Feed Health.
  2. Review traffic volume, top hosts, and TCP health on the Network Overview.
  3. Check which external organizations and countries your hosts communicate with on Perimeter.
  4. Explore communication between hosts on Relation.
  5. Review application activity and errors on the Application Overview and Activity.
  6. Open an asset profile to see the traffic, peers, and services of a single device.

Example questions answered​

QuestionWhere to look
Which hosts use the most bandwidth?Network Overview › Total Traffic drill-down
Is a slow application caused by network problems?TCP Health, Activity › Network, and the asset's Network tab
Which systems communicate with an unfamiliar organization?Perimeter
Which clients still use legacy TLS versions?Application Overview › TLS Version Mix and the SSL/TLS drill-down
What new devices have appeared on the network?Assets › Device Summary