Identifying a virus missed by anti-virus software

Resources

• Unified network traffic monitoring for physical and VMware environments - a NetFort Technologies White Paper

 

Identifying a virus missed by anti-virus software

In a local authority network with 500 users, LANGuardian generated an alert after detecting a DNS MX flood on one of the network ports. The IT manager understood that this situation can arise when a system is generating spam email.

LANGuardian solution

The LANGuardian alert enabled IT to react instantly to prevent any major incidents on the network by blocking the port on which the flood occurred. Drilling down into the detail of the LANGuardian report, the IT manager could see that the traffic was associated with a specific IP address or user. Investigation into other traffic on the IP address around the time of the alert revealed that the user had clicked on a link in a suspect email. The user's anti-virus software failed to detect any unusual activity, but the alert from LANGuardian enabled IT to react swiftly and prevent a major incided on the network. thaCross-referencing

Find out more

If you have any questions about how LANGuardian can help you with your network monitoring requirements, please contact us. If you would like to see LANGuardian in action, please try our online demo system or download a free 30-day trial to try it on your own network with your own data.