{"id":3468,"date":"2025-01-17T01:31:11","date_gmt":"2025-01-17T01:31:11","guid":{"rendered":"http:\/\/www.sumologic.com\/?post_type=integration&p=3468"},"modified":"2025-05-08T19:34:12","modified_gmt":"2025-05-09T03:34:12","slug":"aria-packet-intelligence","status":"publish","type":"integration","link":"https:\/\/www.sumologic.com\/app-catalog\/aria-packet-intelligence","title":{"rendered":"ARIA Packet Intelligence App for Sumo Logic"},"content":{"rendered":"\n
\n
\n
\n

Gain insights into your internal network traffic to accelerate incident detection and response<\/h2>\n<\/div>\n<\/div>\n\n\n\n
\n
\n
\n
\"\"<\/figure>\n<\/div>\n\n\n

Detect network cyber-attacks<\/h3>\n\n\n\n

The ARIA PI application creates unsampled NetFlow or IPFIX metadata for every network packet. This allows for the detection of network-borne attacks, including ransomware, malware, APTs and intrusions early in the kill chain before significant harm occurs.<\/p>\n<\/div>\n<\/div>\n\n\n\n

\n
\n
\"\"<\/figure>\n<\/div>\n\n\n

Stop attacks immediately<\/h3>\n\n\n\n

SOC teams using the ARIA SDS interface, or a SOAR application, can instruct the in-line ARIA SDS instances, to stop the specific threat conversations based on the packet SRC\/DST or 5 tuple. All the while leaving critical devices and production VMs online.<\/p>\n<\/div>\n<\/div>\n\n\n\n

\n
\n
\"\"<\/figure>\n<\/div>\n\n\n

Classify network threats<\/h3>\n\n\n\n

ARIA SDS classifies and generates metadata for all network traffic. As threats are detected, via this metadata SOAR applications, can automatically drive the ARIA PI application to redirect data conversations, as set on filters like Packet SRC\/DST, for further inspection, by detection tools like an IPS\/IPS and DLP.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div><\/section>\n\n\n\n