NDR Essentials and Active threat intelligence
Network Detection and Response (NDR) is a category of network security products designed to detect abnormal traffic patterns to help identify active adversaries operating on your network. Even skilled attackers need to move across or communicate out of your network to carry out an attack. NDR uses sensors to monitor and analyze your network traffic to identify suspicious activity.
-
About NDR Essentials
NDR Essentials uses machine learning to analyze your firewall traffic, and detect indicators of compromise (IoCs).
-
Configure NDR Essentials
Learn how to configure NDR Essentials.
-
Test NDR Essentials
Generate test detections to check that Sophos NDR is correctly set up and working.
-
About NDR Active threat intelligence
NDR Active Threat Intelligence uses curated detection patterns to identify malicious traffic and active adversaries. The firewall logs these events and sends them to the Data Lake for XDR and MDR analysis.
-
Configure NDR Active threat intelligence
Learn how to configure NDR Active threat intelligence.