 |
 |
|
|
|
|
|
|
|
|
|
|
|
|
|
 |
|
|
Step 5: Investigate suspicious changes
|
|
|
Now that you've created your network baseline, you should scan your network on a regular basis and store those scanned results. Then compare the results to the network baseline and be quickly notified of any new hosts and/or TCP/UDP services have appeared. Now you can take action if needed.
The NETFOX makes it very easy to recognize deviations within your network. As a Network Administrator, you can initiate Who and What scans in which the scan results flag any deviations in your network.
You can also view deviations in your network through the Scan History module and even better yet, you can create scheduled Who and What scans. These scheduled scans will store all results within the database. The results can be viewed through the Scan History module. But not only that, the NETFOX scheduled scans will even email you the network delta information.
|
|
|
|
|
|
|
