ARX Radar: who is attacking your perimeter right now
Every public address is contacted by someone all the time. The question is not whether it happens, but when a contact becomes an attack and when that attack is aimed at you.
How it works
Every minute, ARX Radar analyzes the traffic arriving from outside on the company firewall and compares it with the normal behavior of each public address, measured over the previous days.
It recognizes eight types of attack: fast and slow port scans, floods, brute-force attempts, many sources against a single address, attacks from an entire network, the same source hitting several customers, the same source trying every address.
The addresses it watches are the declared ones plus those ARX Radar discovers on its own by observing the traffic. Each attack has a start, an end, a severity and the source dossier.
Inside and outside
ARX Radar watches who is knocking at the door right now. ARX Expose shows what can be seen of your company from the outside, ARX Scout checks first-hand which ports are really open: together they tell you whether an ongoing attack is hitting an exposed service.
What it offers: ARX Radar
- Attacks in progress on your public addresses, in near real time
- Eight types of attack recognized, with thresholds calibrated on each address
- Automatic discovery of the public addresses receiving traffic
- Dossier for every source: country, network, reputation, other customers hit
- Attack history by address, source and period
- Notification at the start and end of every attack
Why choose it
- Separates the background noise of the Internet from real attacks
- Sees the campaigns hitting several companies at once
- No extra software: it uses the firewall logs we already collect
- Thresholds adapt to the normal traffic of each address
Other modules
Find out who is knocking at your perimeter with ARX Radar
Let’s talk about the attacks reaching your public addresses.
Contact us