Netography Fusion® is a SaaS offering that ingests metadata, detects, and automatically remediates threats in real-time.

How It Works

Netography Fusion ingests all forms of flow, and they can be sent securely and efficiently, including; native sFlow and NetFlow from routers, switches, servers & firewalls. Additionally, Netography can ingest Flow logs from all five major cloud providers - Amazon Web Services, Microsoft Azure, Google Cloud, IBM Cloud, and Oracle Cloud. Well-documented APIs are available for every action within the Fusion Portal with real-time responses. After enrichment of the flow streams, the Netography threat detection models are activated. Netography is focused on protecting clients from every possible attack vector's threat detection models are included in all licenses and run in the background.

Netography offers Real-Time and RESTful API integrations with key complementary technologies. Some integration examples include; SIEM, SOARs, and many leading network & security solutions. Custom integrations can be tailored to meet the needs of your organization.

Netography's powerful integrations can remediate and block based on the client's technology stack. Netography can enforce and remediate via BGP, Flowspec over BPG for scalpel precision, API, and DNS orchestration. This differentiated approach enables clients to re-use existing integrations across their environment for maximum flexibility. Clients can visualize data through the Netography Fusion portal or access it via API into an existing visualization or dashboard. Threat hunting is also available via the Fusion Portal or through the API. Deployment is a simple copy/paste of a small piece of code.

Visibility Across The Atomized Network

Netography supports flow data in two primary ways. First, we support NetFlow and sFlow directly from an organization's devices to the Netography platform. Optionally, we have an agent called NetoFlow, that can be run in the environment, for organizations who require an added layer of security for sending their NetFlow and sFlow. The agent supports buffering, filtering, downsampling and an HTTPS connection for sending the flows to the Netography platform. Secondly, Netography supports cloud flow logs from the major cloud platforms to give organizations' visibility into their traffic across the entire Atomized Network.

Netography Query Language®

To better unify the portal, each view of data, and the API, we have created the Netography Query Language® (NQL), similar to the search terminology used in tcpdump. NQL allows a network operator or security operator to search flow records and create custom algorithms while keeping all of the terminology consistent across teams.

For custom pricing, EULA, or a private contract, please contact AWS-Marketplace@netography.com, for a private offer.