NDR Solutions 100

What is the Sangfor Network Detection and Response solutions?

It is called SANGFOR CYBER COMMAND

Cyber Command can be trusted to improve the overall IT security of your enterprise while eliminating potential cybersecurity risks:

1. Superior threat detection and response capabilities by monitoring internal network traffic.
2. Correlating existing security events by applying AI and behavior analysis technology - all aided by global threat intelligence.
3. Uncovering existing security breaches while impact analysis identifies hidden threats within the network.
4. Integrating network and endpoint security solutions to respond to threats in an automated and simplified manner.

Cyber Command is Sangfor Advanced Network Detection and Response solution

Cyber Command allows you to improve your overall IT security and risk posture by implementing advanced Network Detection and Response (NDR) protocols.

sangfor cyber command

Sangfor Cyber Command - NDR Platform
Intelligent Threat Detection and Response Platform

Cyber Command is a Threat Detection and Response Platform which gathers data from different sources, co-relates the contextual logs for each security incident.

Introducing- Cyber Command:

Sangfor Cyber Command - NDR Platform was Intelligent Threat Detection and Response Platform

Where Sangfor Cyber Command fetured with:
1. Golden Eye - AI Technology witch studies the behavior of compromised assets and use this information to strengthen external and internal system defenses.
2. Cross Platform Integration - mean Cyber Command is compatible with multiple different devices and allow to keep existing systems and diply configure Cyber Command into the network.
3. Eliminates Blind Spots - Cyber Command boasts 100%visibility of traffic-monitoring, analyzing, detect threats and decoding data using network application like DNS or mail, and applying advanced AI analysis to uncover suspicious behavior.
4. Stealth Threat Analysis (STA) - using sensor to collects raw network traffic mirrored from switchs, extracts security events and detects abnormal behaviors where existing security solution may be not able to blocked.

As of now it has no NDR Solutions but it has EDR which is the ES. The Cyber Command is a SOC not NDR.

U can refer here

Cyber Command | NDR

network detection and response (NDR) as using “non-signature-based techniques (for example, machine learning or other analytical techniques) to detect suspicious traffic on enterprise networks. NDR tools continuously analyze raw traffic and/or flow records to build models that reflect normal network behavior.”

NDR is a type of network security solution that monitors and analyzes all network traffic, including north/south and east/west traffic using strategically placed sensors. When suspicious traffic patterns are detected, NDR responds automatically to the threat or sends alerts to security operators for further investigation. Threat correlation is a key feature of NDR and provides security teams with the context to simplify forensic investigation, threat hunting, and risk remediation.