Story image

ExtraHop integrates with Google Cloud's new packet mirroring feature

26 Nov 2019

 Google Cloud has announced a new packet mirroring feature that integrates with ExtraHop’s ExtraHopReveal(x) to enable stronger threat detection, investigation, and response.

The packet mirroring feature enables Reveal(x) to analyse network traffic in a passive, agentless manner, in order to provide deeper visibility into security threats against workloads in Google Cloud.

Reveal(x) for Google Cloud Platform is able to automatically discover, classify, and map dependencies between workloads. It is also able to apply advanced machine learning to surface the most critical threats. Equipped with this information, GCP customers can rapidly identify, investigate, and respond to threats, fulfilling their obligations under the shared responsibility model.

ExtraHop CTO and cofounder Jesse Rothstein says that traditional security tools are falling short, which means new thinking is needed.

“Reveal(x) for GCP Packet Mirroring provides security teams with unparalleled network visibility and cloud-scale machine learning for detection and automated response across your business's complex attack surface.”

Through the integration with GCP packet mirroring, ExtraHop Reveal(x) provides full threat visibility, detection, and response across cloud and hybrid workloads.

Full Packet analysis: Reveal(x) leverages GCP Packet Mirroring to capture payloads and headers, enabling in-depth analysis and threat hunting. Machine learning at the application layer provides immediate detection of difficult-to-spot activity, including exfiltration.

Encrypted payload visibility: Reveal(x) decrypts SSL/TLS-encrypted traffic at line rate, including cipher suites supporting perfect forward secrecy, providing complete visibility into all communications, including encrypted malicious traffic.

Augmented investigation: Reveal(x) for GCP automates several early investigation steps to provide analysts with workflows that can be completed in clicks, enabling quick and confident response.

Google Cloud product manager Mahesh Narayanan says traffic visibility is an essential part of preventing security breaches and attacks, particularly as networks become more complex.

“With Packet Mirroring, our customers now have a way to proactively detect network intrusions, analyze, and diagnose application performance issues for both Compute Engine and Google Kubernetes Engine, across all regions and machine types."

Ulta Beauty is one organisation that sees benefits from the Google Cloud and Reveal(x) integration.

Ulta Beauty’s senior director of IT risk management and CISO Diane Brown explains, "Ulta Beauty is a company built on seeing possibilities. It's informed everything from our in-store shopping experience to how we build our business – including the technology that supports it.”

"In cloud computing, we see the ability to grow faster and deliver more 'wow' experiences to our customers. The new integration between ExtraHop Reveal(x) and Google Cloud's new packet mirroring accelerates our cloud adoption by giving us the visibility we need to secure our applications and protect our most precious asset, our customers."

ExtraHop Reveal(x) for GCP is now available in alpha.

Story image
09 Dec
Gartner names Fortinet a Challenger in WAN Edge Infrastructure
Fortinet was also recently named by Gartner as one of the highest three vendors in worldwide market share for enterprise SD-WAN equipment by revenue for Q2 2019.More
Story image
10 Dec
Scale Computing recognised for hyperconverged infrastructure solution
Scale Computing has once again been recognised in Gartner’s Magic Quadrant for Hyperconverged Infrastructure – and the company has appeared in every edition of this quadrant since Gartner introduced it.More
Story image
20 Nov
Google Cloud acquires CloudSimple
Google Cloud has made another strategic move within the cloud sector after acquiring CloudSimple, a provider of secure, high-performance, dedicated environments that help run VMware workloads in the cloud.More
Story image
06 Dec
Russia's data centre market primed for growth - iKS-Consulting
Russia’s data centre market value will see a boost of 27% year-on-year growth, reaching a total of US$561 million, according to research from iKS-Consulting.More
Story image
11 Nov
Vapor IO claims 'world first' software-defined edge interconnect solution
Vapor IO's Kinetic Edge Exchange, known as KEX, is a new way of allowing network operators, application developers and content providers to connect in edge meet-me rooms.More
Story image
13 Nov
Juniper Networks advances customers' private cloud data centers
Data center monitoring continues to increase in complexity as more infrastructure abstractions, services and software are stacked up to construct cloud-native applications.More