Customizable anomaly detection solution with excellent scalability capabilities
Pros
- Kemp Flowmon ADS provides a large set of essential detections out of the box, which allows us to quickly acquire an awareness of potential problems in the monitored network.
- Custom configuration, filters, and false-positive flagging make the system highly customizable for diverse environments.
- Powerful dashboards make summaries and reporting a breeze.
Cons
- Multi-license policy
- Outdated GUI
- Limited use of AI methods
Most Important Features
- Flowmon ADS provides a large set of essential detections out of the box, which allows to quickly acquire an awareness of potential problems in the monitored network.
- Custom configuration, filters, and false-positive flagging make the system highly customizable for diverse environments.
- Powerful dashboards make summaries and reporting a breeze.
Return on Investment
- Early detection of cyber security events and incidents.
- Processing a large number of network flows on input (which means more than 60K flows per second)
- Parameterization of detection methods.
- The possibility to decide on the false-positive rate within the output of each method.
Alternatives Considered
Eset GREYCORTEX MENDEL, Suricata IDS and Snort
Other Software Used
Atlassian Confluence, Nessus, VirusTotal, PortSwigger Burp Suite
