Cubro Omnishark - Integrated solution for network and security analysis
Omnishark is a comprehensive and highly integrated network transparency tool that delivers significant benefits by reducing irrelevant network traffic that must be processed for analytics. Omnishark's innovative approach to network traffic filtering provides highly personalized and tailored filtering of relevant data, significantly reducing the amount of information processed by the SIEM system.
The product used in this solution
Cubro Omnia 120
Manage network traffic in an efficient way
By combining advanced Network Packet Broker (NPB) DPI analytics and traffic filtering software, Cubro has created Omnishark, a scalable solution that allows selective aggregation / deduplication of network traffic.
Implementing the solution means better network performance and reduced costs. Omnishark removes this need for special filtering devices, reduces the amount of network traffic to the minimum necessary, and allows QoS management in a flexible way. The manufacturer's latest solution allows for simple administration of several locations via the Multi-Site Management tool. It provides accurate throughput statistics for individual users/applications with 1-second precision for all traffic.
Extracting only relevant connections in real time
Cubro Omnishark 's traffic filtering reduces load and improves performance by extracting only the right network links. The analytics engine then extracts only meaningful packets from these links, providing an efficient way to generate relevant KPIs in real time.
Omnishark Multi-Site Management is a tool that allows easy administration of multiple sites, providing a comprehensive and scalable tool for network experts. It also includes the Cubro Omnia advanced packet broker (NPB) with a full range of features, acting as a Swiss Army Knife for network monitoring.
Customized filtering and effective packet capture
Omnishark connects to the NPB via interfaces with bandwidths ranging from 1 to 100 Gbit/s, which allows traffic aggregation, filtering and modification, such as tunnel removal or packet segmentation.
The tool enables positive filtering of specific endpoints, such as IP address and VLAN, and negative subtractive filtering, such as applications. The result is highly personalized network traffic analytics. The indexed packet capture function then performs a cyclic capture of the filtered packets, which can be downloaded as a PCAP file for further analysis in Wireshark.
This streamlined approach to analyzing network traffic not only saves time, but also reduces costs associated with processing irrelevant data. What's more, KPI's analytics engine exports raw packets from the indexed capture, analyzes various network metrics and presents the results or exports them to the SIEM, gaining valuable information for decision-making and security purposes.
Contact our specialist and find out the benefits of using Omnishark in your organization! Click on the "INQUIRY A STOVARIS SPECIALIST" button below.