Can we run network monitoring without a security expert?
Yes, if the tool is built for it. With NetSenX, your administrator installs one agent on a host connected to a SPANSPAN: switch port analyser. A switch setting that sends a copy of network traffic to one port, where a sensor can watch it. or TAPTAP: test access point. A small device that copies the traffic on a network cable for a sensor to watch. port, or on the hosts you choose, and every alert is explained in plain language: what happened, on which device and why it looks unusual. What you still need is a person who reads the alerts, ideally each morning, and decides what to do, plus a deputy for holidays and the number of an incident-response firm for the serious cases. NetSenX does not run a managed service, so plan who receives alerts outside office hours: a second mailbox, your IT provider or an on-call arrangement.
Read next
Related questions
Terms used here
- SPAN (switch port analyser)
- A switch setting that sends a copy of network traffic to one port, where a sensor can watch it.
- TAP (test access point)
- A small device that copies the traffic on a network cable for a sensor to watch.