ArcSight®, a leader in Enterprise Security Management, provides solutions that serve as the mission control center for real-time threat management, compliance reporting, and automated network response. ArcSight solutions comprehensively collect, analyze, and manage security data. They also mitigate information risk for security, insider threat, and compliance.
The NetScout/ArcSight partnership
The NetScout nGenius Service Assurance Solution is certified and supports the ArcSight Common Event Format (CEF) connector to deliver automated real-time alerts to the ArcSight Logger, ArcSight ESM, and ArcSight Express platforms. ArcSight CEF integration enables plug-and-play deployment so that on connection, nGenius solution alerts can be immediately leveraged by the ArcSight platform without additional configuration or tuning. ArcSight CEF compliance ensures interoperability and support between platforms and enables customers to have seamless future compatibility as each product evolves. Complementary to the threat management capabilities of ArcSight, NetScout solutions bring incremental value to both ArcSight and NetScout customers. The nGenius Service Assurance Solution provides:
- Enterprise-wide threat correlation
- Network-based anomaly detection
- Improved visibility of faults and threats
- User and service based context
- Rapid drill-down functionality to identify root-cause
The ArcSight CEF integration provides ArcSight users with a range of rich and trusted advanced early warning alerts that link the nGenius Solution’s powerful deep packet analysis and forensics capabilities to improve situational awareness and rapidly assess event impact. Many alerts include contextual links to stored packet-flow data. This granular, on-demand forensic analysis of a specific threat event reduces time to analysis and accelerates incident response and remediation by enabling the IT staff to quickly assess network, service, application, and users details. Instead of trying to recreate the problem or waiting for it to reoccur, the IT organization can quickly isolate the root cause of a problem and resolve the issue before it impacts users.
ArcSight partner designation and certification
NetScout Systems, Inc. is a registered member of the ArcSight Technology Alliance program. ArcSight forms technology partnerships with solution providers. Alliance certification ensures that members’ products and technologies have verified interoperability and provide complementary technologies to deliver a complete end-to-end secure network solution to their customers.