The Corelight Encrypted Traffic Collection offers actionable security insights without decryption. You can fingerprint SSL connections, track soon-to-expire certificates, discover file transfers over SSH, and more.
Support for the Zeek / Bro Intelligence and Input Frameworks:
Deploy Zeek / Bro in 15 minutes with a modern web app:
The Sensor removes elephant flows from its processing jobs, extracting only the key information, which allows you to save on data processing costs and scale your Sensor beyond 25 Gbps.