Detect Malicious Behavior Across The Network

Unlike traditional solutions that hairpin traffic to multiple discrete analytic appliances, VMware is the first security vendor to distribute NTA as a service within the hypervisor. This allows organizations to implement a Zero Trust approach to security with fewer tools and silos while scaling response with confidence, speed and accuracy.

Industry's First NDR Test

Workloads on the VMware multi-cloud platform are the only ones protected against APTs by the NSX Network Detection and Response (NDR) solution that is AAA certified by SE Labs.

READ THE REPORT

Protect Your Multi-Cloud Environments

Get the latest threat report and discover the unique characteristics of malware on Linux-based systems and gain guidance on how you can stay ahead of devastating attacks.

GET THREAT REPORT

Operationalize East/West Security

Behavioral analysis on east/west traffic across multi-cloud environments radically closes the security gap for lateral movement tactics defined by the MITRE ATT&CK.

Tapless Architecture

NTA sensors are built directly into the hypervisor for a completely tapless architecture—easing deployment while eliminating hairpinning.

Accelerate Time to Respond

Threats detected by NTA are correlated into attack campaigns with the context you need for rapid triage and response.

Unify Your Network Security Platform

Couple NTA with the NSX Distributed Firewall (DFW) to get a complete suite of access control and advanced threat detection capabilities.

Top Differentiators

Advanced AI Models

Apply supervised and unsupervised ML to detect network protocol and traffic anomalies and differentiate between real threats and false positives.

Distribute NTA as a Service

VMware distributes NTA directly on the hypervisor, essentially virtualizing the entire security stack, making security intrinsic to the infrastructure.

Encrypted Traffic Analysis

Leverage VMware’s machine learning models that operate directly on encrypted traffic to identify malicious communication without the need to inspect any payload. 

Gain Authoritative Context

VMware gives you more than alerts. Gain full authoritative context of your environment and threat intelligence that is trustworthy, actionable and readily available.

Use Cases

Proactive Prevention, Detection, and Response

Prevent lateral movement and exfiltration of data by inspecting every packet for anomalous, advanced, and zero-day attacks across your East-West traffic.

Obtain Broader Threat Visibility

Provide your security team with the highest level clarity when monitoring networking events. NTA ensures your team is best positioned to take action driven by visibility, depth, and accuracy of data collection.

Detect Threats On Encrypted Traffic

VMware pioneered an innovative approach of building models that operate directly on encrypted traffic to identify malicious communication without the need to inspect any payload.

Reduce Complexity
Intelligent Risk Correlation
Authoritative Context
Encrypted Traffic
VMware NSX Network Detection and Response helps us sleep better at night—we know that NSX will detect it.

Related Resources

Advanced Threat Prevention with VMware NSX Distributed Firewall

Deliver effective security by using multiple detection technologies, including network sandboxing, combined with a correlation engine.

READ WHITE PAPER
A Practical Path to Zero Trust

How to Block Lateral Movement

Elevate network security with advanced detection of lateral movements that goes beyond EDR and logs.

READ BLOG POST

Ransomware Demands a Layered Defense

Fighting ransomware with prevention alone isn’t enough. You need Network Detection and Response to contain successful attacks.

READ BLOG POST

Related Products

Expand your data center security capabilities with detection and response, threat prevention and more.

NSX Network Detection and Response

AI-powered correlation of events across multiple detection engines

NSX Distributed IDS/IPS

Signature and behavior based detection of ransomware and other threats at every hop

Network Traffic Analysis

Detect anomalous activity and malicious behavior as it moves laterally across your network

NSX Intelligence

Distributed analytics engine for topology visualization & policy recommendations

Why VMware for Network Traffic Analysis

NTA detects malicious behavior as it moves laterally across your network, uncovers anomalous activity, and secures East-West traffic across multi-cloud environments.