Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

QRadar Adds Identity Tracking to NBAD

bulletProduct Site:
QRadar Overview
bulletRelated Story:
QRadar Overview
bulletFeature Review:
QRadar Overview
bulletCompetitor:
Mazu Networks

Radar 6.0, a network anomaly detection and security event management (SEM) product, adds identity tracking to its feature set. By tying in user identities to other information, administrators can see who is on a particular host without having to manually correlate IP addresses with user logins. However, this is something of a catch-up feature, as other network anomaly detection and SEM products have had this capability for at least a year.

That said, QRadar is unique in the SEM market. In addition to processing events from other systems, it can monitor network traffic flows using direct packet analysis or flow records from routers and switches, including NetFlow, sFlow and jFlow.