Does a network sensor send packet contents to the cloud?
That depends on the product, so ask each vendor exactly what leaves your network, in what form and where it is stored. Some tools copy full packets for later analysis, others send only summaries of each connection. NetSenX analyses metadata and a few protocol fields, such as timing, volume, destinations, DNS answers and the TLSTLS: Transport Layer Security. The encryption that protects most internet traffic, such as HTTPS. handshake, and never decrypts encrypted traffic. It does not upload file contents, e-mail text or what someone typed into a website. Customer data is stored in the EU, with the database in Ireland and the API in Frankfurt and Paris, and an on-premises option is available on the Enterprise plan for organisations that want nothing to leave their premises. Metadata can still identify a device and, through it, sometimes a person, so it is personal data under the GDPRGDPR: General Data Protection Regulation. The EU data protection law (Regulation (EU) 2016/679).: the data processing agreement sets out how it is handled.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
Read next
Related questions
- Can I get my data out when leaving a security vendor?
- What is the difference between data residency and data sovereignty?
- After the Schrems II ruling, can we still use security tools from US companies?
- Do a vendor’s data residency promises also cover logs, backups and support data?
- Which questions should we ask a security vendor about its sub-processors?
Terms used here
- TLS (Transport Layer Security)
- The encryption that protects most internet traffic, such as HTTPS.
- GDPR (General Data Protection Regulation)
- The EU data protection law (Regulation (EU) 2016/679).