What does baselining mean, and how long does it take?
Baselining means learning what normal looks like for each device: whom it talks to, on which ports, how much data and at what times, so that a deviation stands out. It takes as long as your business takes to show its normal rhythm: daily patterns appear within days, weekly ones within weeks, and monthly jobs such as payroll or reporting only after a month or more. During that time, expect more alerts and confirm what is normal; your decisions speed it up. A baseline is never finished, because networks change: new servers, new software, new suppliers. NetSenX raises alerts on clear patterns from the start and improves its comparisons with each host's own history as it learns your network.
Read next
Related questions
- What should a small company do when a security alert arrives?
- Who watches the security alerts at night and at weekends?
- Who watches our network when the IT administrator is on holiday?
- Who gets the alert if something happens on the network over Christmas?
- Why do cyber attacks often happen during holidays?