NIKSUN NetDetector/NetVCR Alpine v4.1
Strengths: NetXpert, reporting features and application reconstruction make for simple network analysis.
Weaknesses: None that we found.
Verdict: Easy-to-use, all-in-one network forensic tool that allows analysis and reporting. For its superior performance, value and comprehensive functionality, we designate this tool SC Lab Approved.
SummaryIn the field of network forensics, the NIKSUN NetDetector is a user-friendly, all-in-one appliance. Its features include full-packet capture and analysis, including application reconstruction, full-featured intrusion detection, along with a powerful reporting tool and the NetXpert analysis utility.
The setup for this product is straightforward. Once the IP address of the management interface is configured, it can be plugged into the network and accessed via a web browser that supports Java. The last step in the setup is plugging the network monitor interface into a switch's span/monitor port or other network feed.
NetDetector's packet viewer allows users to see all network traffic in a prompt manner. Once the packets have been captured, the analysis is easily completed through dashboards that break down the information into easy-to-understand graphics and charts.
Application reconstruction is a powerful tool that allows users to view this layer from raw packet data. On top of that, there is built-in IDS that allows users to not only see alerts on current data but also data captured at an earlier date.
The NetXpert function lets users fully analyze their data with built-in queries that would normally be time-consuming to answer by hand. For example, one "Ask the NetXpert" question is: "Are there any port scans on my network." This report then gives a list of hosts that have been performing port scans.
Support from NIKSUN is offered in several tiered packages for multiple languages and countries with "around the clock" service. Assistance can easily be found under the support tab on the NIKSUN website. The support staff is pleasant to work with and professional.
The NIKSUN NetDectector has a base price of $24,705. At this price, it is a top-choice tool for simplicity and power in network forensics.