{"id":52733,"date":"2023-07-12T17:58:00","date_gmt":"2023-07-12T17:58:00","guid":{"rendered":"https:\/\/www.networkworld.com\/article\/3702394\/cisco-amps-up-security-analytics-software.html#tk.rss_security"},"modified":"2023-07-12T17:58:00","modified_gmt":"2023-07-12T17:58:00","slug":"cisco-amps-up-security-analytics-software","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cisco-amps-up-security-analytics-software\/","title":{"rendered":"Cisco amps up security analytics software"},"content":{"rendered":"
<\/div>\n

Cisco unveiled a new version of its Secure Network Analytics (SNA) software aimed at making it easier to track more data flows and act faster on relevant security alerts. Enhancements in SNA release 7.4.2 include the ability to more efficiently gather, process and store data; advanced detection capabilities; improved telemetry support; and the ability to run on Cisco\u2019s high-performance UCS M6 hardware.<\/p>\n

Cisco\u2019s network analytics software is designed to help organizations detect and respond to security threats by harnessing telemetry data from multiple sources and providing insights into network behavior to proactively identify risks, according to a blog post<\/a> by Jay Bethea, product marketing manager with Cisco\u2019s secure email group.<\/p>\n

SNA release 7.4.2 has tremendous scale and performance, easily processing 3 million flows per second and improving reporting and query performance by 94%, said Crystal Storar, director of product management with Cisco Security. That\u2019s more than double the previous rate, according to Cisco.<\/p>\n

The new package continues to add to the centralized data storage capabilities first implemented in SNA release 7.3<\/a>. With a centralized storage system, rather than having telemetry data stored on individual, distributed Flow Collectors (the monitoring system that gathers network data traffic packets), a central database now processes the flows coming from those devices. By centralizing the data store, Cisco says the system can process large amounts of data very quickly, which means that Cisco Analytics queries can be answered faster than they would be if the data were stored on individual Flow Collectors.<\/p>\n

The new software also lets data from the FCs be retained for periods of a year or more, improving trendspotting and historical analysis, Cisco said.<\/p>\n

Other key features of SNA 7.4 target areas such as on-premises delivery options, expanded telemetry support, and enhancements to its threat detection engine.<\/p>\n