RSA NetWitness Decoder
NetWitness Decoder is a real-time, distributed, highly configurable network-recording appliance that enables users to collect, filter, and analyze full network traffic in an infinite number of dimensions.
Decoder is the cornerstone of the RSA NetWitness infrastructure and the key component of an enterprise-wide network-security-monitoring platform.
Unlike every other full packet capture product, Decoder fully reassembles and globally normalizes all traffic at every layer for full session analysis. The patented Decoder represents a breakthrough in network-traffic monitoring that dynamically builds a complete data taxonomy across all layers and applications, including full packets.
Place NetWitness Decoders wherever you want to capture traffic: egress, core, facility, or segment. They can be operated continuously or tactically, and can ingest any network capture feed from any source.
Decoders are designed to interoperate with RSA NetWitness Investigator, RSA NetWitness Informer, RSA NetWitness Spectrum, and RSA NetWitness for Logs and to push data to central RSA NetWitness Concentrators for aggregated analytical views.