NetWatch sits passively on a span port and captures all traffic traversing the network. NetWatch uses deep packet inspection to extract information buried within packets. State-of-the art machine learning techniques detect anomalous behavior on networks. Coupled with a comprehensive signature database, NetWatch provides robust protection to industrial networks and components.
NetWatch also contains a hybrid signature-and anomaly-detection engine, as well as vast array of ICS protocol parsers enabling monitoring of most networks.