NETSCOUT > Case Studies > Data Service Provider Uses Omnis Cyber Intelligence With AWS To Gain Extended Real-Time Visibility

Data Service Provider Uses Omnis Cyber Intelligence With AWS To Gain Extended Real-Time Visibility

Company Size

200-1,000

Region

America

Country

United States

Product

Omnis Cyber Intelligence
NETSCOUT CyberStream
AWS Gateway Load Balancer

Tech Stack

AWS
CyberStream
Omnis Cyber Intelligence

Implementation Scale

Enterprise-wide Deployment

Impact Metrics

Cost Savings
Customer Satisfaction
Productivity Improvements

Technology Category

Analytics & Modeling - Real Time Analytics
Cybersecurity & Privacy - Cloud Security
Infrastructure as a Service (IaaS) - Cloud Computing

Applicable Industries

Software
Telecommunications

Applicable Functions

Discrete Manufacturing
Quality Assurance

Use Cases

Cybersecurity
Intrusion Detection Systems
Real-Time Location System (RTLS)

Services

Cloud Planning, Design & Implementation Services
Cybersecurity Services

About The Customer

Nova DBA is a data services provider with over two decades of experience in helping organizations protect, manage, and leverage their data on-premises and in the cloud. The company offers ProActive Support, a crucial tool for any organization that relies on its data and business-critical applications, ensuring data security and availability. Some of Nova DBA's clients have been attacked several times on their corporate websites while using the services of Nova DBA's e-commerce platform deployed in AWS. These clients had experienced network-based events in their AWS infrastructure that caused network slowdowns, availability issues, and raised concerns about the security of their critical applications and data.

The Challenge

Nova DBA, a data services provider, faced a significant challenge when its clients experienced multiple cyber attacks on their corporate websites. The existing solution was unable to provide useful data for incident detection and response, leaving the company without real-time visibility to identify Indicators of Compromise (IoC) and understand the nature, source, or severity of the threat. The company's clients had experienced network-based events in their AWS infrastructure that caused network slowdowns and availability issues, raising concerns about the security of their critical applications and data. The cybersecurity team lacked visibility into the network attack vectors they were facing and had no tools or framework to detect, monitor, and classify these threats.

The Solution

Nova DBA deployed Omnis Cyber Intelligence (OCI) and CyberStream in a dedicated Security VPC in AWS to provide visibility and insight into the security posture of their AWS cloud infrastructure and applications. They used the AWS Gateway Load Balancer (GWLB) End-Point as traffic mirror targets to securely route mirrored traffic from their applications to CyberStreams deployed in their Security VPC in AWS. This approach did not impact the inspected applications packet flow and did not introduce non-AWS services into their application’s environment. The company also used NETSCOUT's packet-based monitoring, AIF feed, and Omnis Cyber Intelligence technology in the Amazon cloud. This approach provided the cybersecurity team with comprehensive visibility into infrastructure and application security, necessary to protect their customer environments against cyber threats.

Operational Impact

The cybersecurity team gained extended visibility into infrastructure threats and vulnerabilities.
Better intelligence for faster detection, investigation, and remediation and reduced MTTR (Mean Time to Resolution).
Improved network operations (NetOps) and Security Operations (SecOps) collaboration.

Quantitative Benefit