Organizations are increasingly embracing the benefits of the Cloud, but up until now native security monitoring for threats, compromise or data theft within cloud-based applications, workloads and databases has been difficult to achieve without the use of performance limiting and costly VM-based monitoring agents. Microsoft has recently launched the Azure Virtual Network TAP providing cloud native network traffic monitoring of VMs without agents. Get peace of mind when it comes to the security of Azure cloud-based applications by continuously monitoring at high speeds with Fidelis Network.
Extend Your Detection of Threats and Data Loss to Azure Applications
Fidelis Network provides unmatched network threat detection, threat hunting and data loss detection at high speeds for all ports and protocols without data sampling or packet drops. Now you can extend the Deep Session Inspection (DSI) visibility and analysis of Fidelis Network natively to cloud-based VM applications, workloads and databases in Azure.
Each Fidelis Network VM sensor can analyze up to 2Gbps of network traffic with no data sampling or packet drops. This means that every port and protocol is fully analyzed with Deep Session Inspection (DSI) without interrupting workflows. Multiple sensors can be used to scale for higher network performance.
Get peace of mind with deep visibility into application and virtual machine traffic for content and context. The Azure Virtual Network TAP covers north-south communications, through web front ends and east-west traffic between back end virtual machine processes and databases in Azure.
Third party agents are not required for the Azure Virtual Network TAP. The solution directly communicates with cloud-hosted Fidelis Network sensors across virtual networks - making the process straightforward and efficient.
Enterprise wide Metadata of Content and Context for Real-time and Retrospective Analysis
Fidelis Network includes five sensor types for enterprise wide visibility across direct gateways, internal networks, cloud VMs, email and web gateways. Analysis of traffic using patented Deep Session Inspection (DSI) technology includes over 300 metadata attributes with custom tags for real-time and retrospective analysis for threat detection, threat hunting and data loss or theft detection.
✓ Fidelis Network includes direct, internal, cloud, email and web sensors
✓ Native Deep Session Inspection (DSI) of Azure cloud VM-based communications
✓ Metadata for hundreds of attributes and custom tags, store up to 360 days
✓ Cross session and multi-faceted analysis, plus machine learning anomaly detection
✓ Real-time and retrospective analysis for threat detecting, hunting and data loss/theft
✓ 10Gbps appliance and 2Gbps VM sensor analysis capacity with no data sampling or packet drops
✓ Expand to Fidelis Elevate with endpoint detection and response (EDR) and deception
Too Busy to Monitor Azure?
Rest easy - at Fidelis, we've got you covered with our Managed Detection and Response (MDR) service for 24/7 cloud monitoring of Azure virtual machines. Our MDR team is comprised of expert security operations professionals, forensic analysts, incident responders and threat hunters who have together been called in to successfully run critical IR projects in response to many of the biggest data breaches on record, plus the experience of over 4,000 IR cases and 100-plus court testimonials.
Azure Virtual Network TAP
Microsoft provides a new Azure Virtual Network TAP to send cloud VM network monitoring data into VM hosted Fidelis Network sensors.
No third-party agents are required, this is a first of its kind native cloud VTAP and is a good solution if:
- You are migrating apps, workloads and databases to Azure VMs
- You have invested in the Azure Virtual Network TAP for security, APM and other uses
- You desire to expand Fidelis Network visibility into Azure cloud VMs