Features & Benefits
SENSORS
Physical Sensors
Yes
IOA Framework
Yes
ENCRYPTED ANALYTICS
Encrypted Traffic Processing
Yes
TLS Fingerprinting (JA3/JA3S)
Yes
File & Cert HASH
Yes
C2 DETECTIONS & INSIGHTS
HTTP C2
Yes
DNS tunneling
Yes
ICMP tunneling
Yes
Layer 7 Application Tagging
Yes
Domain generation algorithms
Yes
CLOUD AI FUNCTIONALITY*
Logging
Yes
File extraction
Yes
Cloud package manager
Yes
ML Intel Framework
Yes
ML Communication Framework
Yes
ML Netflow Framework
Yes
ML Observation Framework
Yes
JSON API Ingestion
Yes
SECURE DNS
Natively integrated
Yes
Neural Network Ingestion
Yes
Autonomous Blacklist Generation
Yes
PERFORMANCE
3.5+ Gbps per sensor
Yes
Optimized file extraction (5,000+ files/minute)
Yes
Performance monitoring
Yes
< 1% packet loss rate
Yes
MANAGEMENT
Deployed in <15 minutes
Yes
Web management interface
Yes
Automatic software updates*
Yes
Comprehensive sensor health monitoring
Yes
RESTful API support
Yes
1-click package installation
Yes
SMTP Alerts & Notifications
Yes
DATA EXPORT
Native JSON integration with SIEMs
Yes
ELK, Syslog, Splunk App, Apache Avro, SFTP
Yes
Default log streaming
Yes
DATA CONTROL
Log data reduction mode (30-50% reduction)
Yes
Filter by log type and contents
Yes
Filter by file type
Yes
SECURITY & SUPPORT
Subnet lockouts
Yes
Jailed processes
Yes
FIPS 140-3
Yes
2FA & Proximity Access
Yes
Automatic security updates*
Yes
AES-256 Disk encryption
Yes
* Requires active support services subscription (Subscriptions are billed in increments of 10 for under 100 users and 25 for over 100 users)