LANGuardian 14.6 is a security and maintenance release and we recommend all users update to this version. LANGuardian 14.6 contains the following: Updated Linux kernel and CentOS packages and other...
If you want to analyse network traffic data that is no longer available online and if you have backup enabled, you can import archived data back into a LANGuardian reader...
Active Server Ports I spent most of last week on the road visiting customers. Many of them were working on projects to reduce the number of physical servers hosted in...
What is DNSpionage? Late last year, Cisco Talos discovered a DNS hijacking attack targeting Lebanon and the United Arab Emirates (UAE) affecting .gov domains, as well as a private Lebanese...
We always advise our customers to open a Secure SSH tunnel for NetFort Support. This way, if you need any assistance at any time we can jump straight onto your...
A customer recently contacted us with a situation: "We have an IP camera system and our security department is constantly monitoring the feeds, this is traversing the network and as a...
All LANGuardian systems (Standalone, Central Managers and Sensors) are built using the same software, but they are configured and licensed in different ways. To create a Central Manager and Sensor...
Please note that the license text file has a file name similar to <netfort-license-xxxx-xxxx-xxxx-xxxx>.txt. To apply your new LANGuardian license, please follow these steps: If the old license has expired : Download and...
We have great news about the Brocade ICX 7750 switches! VLAN monitoring is now supported. Check out the ICX7750 web site for the: Specific V-LAN Mirroring page of layer 2...
Here is an example of a SPAN configuration for a Nexus 7000 switch. In my case of the command below, I am monitoring more than 1 vlan. In configuration mode:...
By following the steps outlined below, you can easily create a LANGuardian image on a VM VirtualBox which will allow you monitor the traffic passing in and out of the...
A LANGuardian customer recently contacted us with an interesting solution for their complex core switch. They could not seem to set Ethernet 1-2/1/12 as a SPAN port, the customer told...
We found this to be a good guide on how to set up port mirorring on this switch. http://www.oleksiygayda.com/2009/10/h...
LANGuardian can be accessed using a web based management system. You can access this from any web browser by entering https://"The IP address you assigned to the LANGuardian." You will be asked...
Many of our customers have been asking how to add a NetFlow sensor to LANGuardian, here are the steps you should follow: 1. Click on LANGuardian's menu bar and select Sensors....
What are network security monitoring tools? Network Security Monitoring is the collection, analysis, and escalation of indications and warnings to detect and respond to intrusions on computer networks. Network security...
Alert on Rogue DHCP Servers Using Network Traffic as a Data Source Recently a customer came to us with the following query: "We were wondering whether there is a way...
LANGuardian 14.5 NetFort is delighted to announce the availability of our latest LANGuardian release, V14.5. “One of our objectives is to ensure that our customers always have ‘eyes on their...
What is RYUK Ransomware? An advisory from the US based Department of Health and Human Services notes that attacks involving RYUK appear to be targeted. In fact, its encryption scheme is...
What is RADIUS? RADIUS stands for Remote Authentication Dial In User Service. A RADIUS server can support a variety of methods to authenticate a user. When it is provided with...
More reasons to check inbound traffic on your network Looking though the latest infosec news this week I spotted two exploits which use similar attack methods. Printers targeted via TCP...
What our customers want to extract from PCAP files In my previous blog post on the topic of PCAP file management, I looked at how you can import and export...
Working With PCAP Files PCAP or packet capture files can be extracted from the network by using applications such as Wireshark or exporting them from network devices such as firewalls....
Why does Google sometimes show unusual traffic messages? Recently I worked with a number of network managers who downloaded our LANGuardian software to try and find the source of malware...
Monitoring traffic on your network is important if you want to keep it secure and running efficiently. The information obtained by network traffic monitoring tools can be used in multiple...
Tracking Mobile Devices on Your Network In this video we look at how you can monitor mobile devices on your network using LANGuardian. LANGuardian is deep-packet inspection software that monitors...
Network Traffic Metadata – Four recent customer use cases The rising popularity of network traffic metadata is because it's in the sweet spot between full packet capture like Wireshark and...
DESCRIPTION At NetFort, we design and develop software that analyzes network traffic using deep packet inspection techniques to give our customers a unique level of internal visibility, including user activity,...
Users Leaving? How to get an audit trail Network users come and go. When new employees start we create sign on accounts and assign any relevant permissions. When employees leave...
What is RDP? (Remote Desktop Protocol) RDP is a proprietary protocol developed by Microsoft. It provides a user with a graphical interface to connect to another computer over a network...
