Delivering on the Promise

CNAM brings all the right components required to operate an effective security program but without the expensive overheads

• Entire threat detection stack in the managed framework, available in SaaS model with no upfront investment
• Learns your environment and can be customized to meet your needs
• Visibility at all layers to detect the most sophisticated attacks before they happen

CNAM delivers next generation threat detection using packet level profiling and analytics capabilities.

• Auto’magically’ identify ratio deviations in packet trends to call-in correlation modules
• Detect changes in your environment using a profile based anomaly engine identifying every new destination, domain, URL, filename, or user.

CNAM’s engine is built ground up to correlate around the attack. CNAM’s triggers can concurrently process several hundred correlation module

• Reduced implementation time required for tuning and environmental learning due to attack centric correlation
• Expand correlation and graph logic without worrying about the number of active rules
• Respond to threats in real-time, as modules are triggered at the time of the event and not on a set time window.

CNAM’s continuous integration engine profiles threats, packets and data usage to identify attack indicators. CNAM is designed to work autonomously on customer policies to maintain accuracy and real-time capabilities.

• Managed detection and correlation systems give customers the freedom to operate without in-house expertise
• Threat intelligence is continuously shared and integrated in real-time

CNAM’s distributed control plane architecture is used for instant deployment and management of remote systems and policies.

• Enforce standardized security rules across your vast enterprise network
• Instantly scalable to new devices added with easily configurable node-specific correlation and detection

Advanced Threat Detection, Attack Correlation and Enabled Response are delivered as a single solution with CNAM. Plus further integration with your business application gives you complete information security coverage.

• Threat management that encompasses the complete enterprise architecture
• No backdoors or vulnerabilities open to exploitation

We drive the entire deployment process efficiently while you can safely concentrate on your business. CNAM's deployment is quick, easy and trouble-free enabling it to be up and running in no time.

• Deploy quickly and easily on commodity hardware without the hassles of large scale project management and expensive consultants.
• Our Big Data back-end enables a flexible and seamless threat management solution that can evolves as you do.
• Dedicated deployment resources to provide support whenever needed

Instead of giving you bulky log reports of all events, CNAM gives you summarized logs after performing aggregation, storage, indexing and searching of large amounts of system data.

• Easy to read log reports
• Conveniently shared for audit and security requirements

With CNAM, you don’t need any additional compliance tools. CNAM satisfies your compliance requirements by generating logs and reports as per your needs.

• On boot compliance with regulatory requirements

All transactional and attack data remains on the customer's network with only summarized result-sets leaving the network for correlation

• Comply with stringent data privacy and data security regulations
• Confidential business critical information stays within your network

The UNET is a global facility used by CNAM to deliver real-time threat intelligence to its customers. The UNET aggregates intelligence from two networks viz. the CNAM customer network and the partner network. UNET is a network of global presence points called as Point-of-Presence (POP).

• Each POP has a correlation management and intelligence processing facility
• All POPs are directly controlled by the CNAM team at NETMONASTERY
• Customization on each customer is performed centrally from the CNAM Threat Center

The IDD is the primary whistle blower for the CNAM service, it uses multiple technologies for detecting attacks in real-time. Each IDD is customized to the needs of the network and is monitored using unique correlation rules deployed by the CNAM Threat Center. Detection modules in the IDD are updated continuously to keep up with the changing threat landscape.

• The IDD contains industry standard and proprietary technology that detect attacks
• It houses a traffic anomaly engine for floods
• It also includes a collaborative worm detection engine to detect outbreaks

NAG is a local event collection and analysis engine, that is responsible for executing the correlation logic on the accumulated data. The NAG ensures that all the data collected by CNAM remains within the network perimeter. The NAG is in constant connectivity with the UNET which supplies real-time threat intelligence for accurate decision making.

• The NAG collects event logs from various sources and locally processes them
• This device pulls up correlation strategies from the UNET
• The NAG applies the correlation strategies on the current event thread to develop local intelligence and a trend