Network blindness: You can't protect what you can't see

"We have a firewall and antivirus, we're fine." How many times have we heard this? But what if the era of perimeter defense is over and the attackers are inside? Without a deeper understanding of the network, its structure and operations, you are essentially "network blind." And that's a big problem in cybersecurity.

Yes, it is true that firewalls and antivirus are a necessary foundation. But only a foundation. They cannot detect that something strange is happening inside the network. They cannot see the lateral movement of an attacker, they cannot detect unusual communication between servers, they cannot catch strange DNS queries. We need contextual visibility – who, what, where, when and how is communicating.

Novicom NADS: A quick look at the state of your network

For those of you who want to find out what the state of your network is, there is the Novicom NADS service. It is not a permanent deployment, but a temporary service that can, within a few days:

• determine the current state of your network,
• identify weak points in your network infrastructure,
• identify the needs for changing the network infrastructure,
• point out outdated devices that need to be updated to the latest firmware versions,
• draw diagrams and connection maps,
• point out other risk areas,
• create up-to-date network documentation,
• find security anomalies in the network infrastructure.

At the end of the process, you will receive a clear report. No vendor lock, no complicated descriptions. Just clear information about the real state of your network.

More in detail: Context from Novicom ADDNET

If a customer has ADDNET deployed, network status analysis becomes even more meaningful. Why? Because thanks to Novicom ADDNET, we also obtain data on:

• assigned IP addresses,
• devices and their properties,
• VLANs, locations and users,
• status of basic network services (IPAM, DHCP, DNS),
• readiness for deployment of segmentation and network access control (NAC),
• access policy including advanced network policies.

So the whole context of the traffic. Instead of "IP 192.168.1.25 was doing something strange", we have the information that "user XY's laptop from the Prague office tried to communicate with a server in the DMZ, where it should not have access". And that's a significant difference, don't you think?

Having an overview of what is happening on the network is a necessity today. Novicom NADS will offer a fast, independent and clear view. And if you then decide to work with this data further, Novicom ADDNET and other Novicom solutions will open the door to a truly secure network.