Advisor
Network Security
Domains Network Security Network Threat Detection & Analysis (IDPS / NTA / DPI)
Network Threat Detection & Analysis (IDPS / NTA / DPI)
Network Threat Detection & Analysis encompasses technologies designed to identify, monitor, and analyze malicious or unauthorized activities within network traffic.
Network Threat Detection & Analysis encompasses technologies designed to identify, monitor, and analyze malicious or unauthorized activities within network traffic. This category includes Intrusion Detection and Prevention Systems (IDPS), Network Traffic Analysis (NTA), and Deep Packet Inspection (DPI), each contributing to the detection of threats and anomalies at various layers of the network stack. Core capabilities involve real-time traffic inspection, behavioral analysis, protocol decoding, and the identification of known and unknown threats. These solutions can detect lateral movement, command-and-control communications, and policy violations by examining both metadata and payloads. They often integrate with security information and event management (SIEM) platforms to provide context and support incident response workflows. Network Threat Detection & Analysis tools are primarily used by security operations teams, network administrators, and incident responders in organizations seeking to protect sensitive data and maintain network integrity. Unlike endpoint detection solutions, which focus on individual devices, or firewalls, which enforce access controls, this category emphasizes in-depth visibility and threat detection across the entire network environment. Cyberin provides a neutral platform for discovering and comparing Network Threat Detection & Analysis solutions to support informed decision-making.
75
Vendors
152
Products
618
Datapoints
4
Subcategories
Vendor Landscape how the vendors in this category relate
neutral · data-driven
Arrange bySimilarityThis categoryNetwork Security DomainThe Cyberin Framework (TCF)SeniorityEmployee countStock price
Related Wiki Articles
Some products are hidden. Sign up for free to see them all.
Filters
Subcategory, Detection Methods, Deployment model, Management and integrations, Notable Features +6 more Show ↓
Subcategory
All Intrusion Detection and Prevention Systems (IDPS) Network Traffic Analysis (NTA) Deep Packet Inspection (DPI) Network Packet Brokers
Vendor
All Cisco Keysight NETSCOUT Cubro Fortinet Gigamon Corelight Trend Micro + 67 more
Detection Methods
All Anomaly detection Behavioral Analytics signature-based Rule-Based Policies Machine Learning Deep Packet Inspection Protocol analysis UEBA
Deployment model
All Cloud On-premises Virtual appliance Network-based IDS Inline IPS Passive IDS Host-based IDS
Management and integrations
All SIEM integration REST API Centralized management Syslog SOAR integration Cloud management
Notable Features
All Threat intelligence Application awareness Zero-day protection Threat hunting Sandbox integration Lateral movement detection Open source Asset discovery
Integrations
All SIEM API SOAR ServiceNow Slack Splunk Firewalls REST API
Telemetry Sources
All DNS NetFlow sFlow TLS NetFlow/IPFIX IPFIX HTTP ICS/OT protocols
Signature/feed compatibility
All Custom Proprietary Snort Suricata rules Zeek Signatures OSSEC rules Emerging Threats CrowdSec Scenarios
Form factor
All Virtual appliance Cloud service Software 1U 2U 3U
Cloud integrations
All AWS Azure Google Cloud VMware AWS VPC Traffic Mirroring Azure vTAP Azure sensors GCP Packet Mirroring
Form factor and scale
All appliance/VM VM distributed 10/40/100GbE elastic scale Cloud Managed Clustering multi‑100Gbps
114 products
Sort:
Show:
NGAF
Sangfor
NGFWApplianceModel dependent
NSX Distributed IDS/IPS
VMware
Distributed IDS/IPSSoftwareHost-based
Next-Generation Firewall
Hillstone Networks
NGFWApplianceModel dependent
NGFW
Forcepoint
NGFWApplianceModel dependent
Thunder CFW
A10 Networks
Converged FirewallApplianceHigh throughput
Suricata
OISF
IDS/IPS EngineOpen-sourceCPU dependent
Deepfield
Nokia
Traffic AnalyticsCloudCarrier-scale
Application Visibility and Control
HPE Aruba Networking
DPI FeatureAPAP/controller dependent
Cloud Firewall
Zscaler
Cloud FirewallCloud serviceCloud-scale
Secure SD-WAN
Versa Networks
SD-WAN with NGFWApplianceModel dependent
BIG-IP Advanced Firewall Manager
F5
Data Center FirewallApplianceHigh throughput
DefensePro
Radware
DDoS Protection ApplianceAppliance10G–400G
Secure Firewall
Cisco
NGFWApplianceHardware acceleration
Snort
Snort
IDS/IPS EngineOpen-sourceCPU dependent
FortiGate
Fortinet
NGFWApplianceASIC accelerated
Next-Generation Firewall
Palo Alto Networks
NGFWApplianceHardware and software
NSa Series
SonicWall
NGFWApplianceModel dependent
Sophos Firewall
Sophos
NGFWApplianceModel dependent
Vision ONE
Keysight
Network Packet Broker with DPIAppliance40G–100G
Service Gateway
Allot
Carrier-gradeApplianceModel dependent
InfiniStreamNG
NETSCOUT
AnalyzerAppliance40G–100G
Application Intelligence
Gigamon
DPI for VisibilityAppliance moduleHigh throughput
R&S PACE 2
Rohde & Schwarz ipoque
DPI EngineLibraryHigh-performance
R&S vPACE
Rohde & Schwarz ipoque
Virtualized DPI EngineCloud-nativeMulti-Gbps per core
Also in Network Security
Filter by Vendor
Cisco
8 products
Keysight
7 products
NETSCOUT
6 products
Cubro
5 products
Fortinet
5 products
Gigamon
5 products
Corelight
4 products
Trend Micro
4 products
Check Point
4 products
Palo Alto Networks
4 products
ntop
4 products
Network Critical
4 products
ExtraHop
3 products
Hillstone Networks
3 products
Progress Flowmon
3 products
cPacket Networks
3 products
Nozomi Networks
3 products
Vectra AI
3 products
Sangfor
3 products
AT&T Cybersecurity
2 products
NIKSUN
2 products
Barracuda
2 products
Forcepoint
2 products
OISF
2 products
NetWitness
2 products
Claroty
2 products
Plixer
2 products
Sophos
2 products
WatchGuard
2 products
Garland Technology
2 products
SonicWall
2 products
Microsoft
2 products
Juniper Networks
2 products
Rohde & Schwarz ipoque
2 products
VMware
1 product
A10 Networks
1 product
Cisco Meraki
1 product
CrowdStrike
1 product
ManageEngine
1 product
VIAVI Solutions
1 product
Radware
1 product
Stamus Networks
1 product
Kentik
1 product
Trellix
1 product
Wazuh
1 product
Exeon
1 product
Nokia
1 product
SolarWinds
1 product
LiveAction
1 product
Cato Networks
1 product
Snort
1 product
Dragos
1 product
OSSEC
1 product
Versa Networks
1 product
Allot
1 product
APCON
1 product
CrowdSec
1 product
Zscaler
1 product
Forescout
1 product
OPNsense
1 product
Google Cloud
1 product
Arista Networks
1 product
Pluribus Networks
1 product
pfSense
1 product
Amazon Web Services
1 product
Niagara Networks
1 product
IBM
1 product
HPE Aruba Networking
1 product
Zeek
1 product
Open Systems
1 product
GREYCORTEX
1 product
F5
1 product
Security Onion Solutions
1 product
Darktrace
1 product
Enea
1 product
0 selected
Compare
Looking for the best Network Threat Detection & Analysis (IDPS / NTA / DPI) tool? Our Advisor can help you compare.
Ask the Advisor
CYBERIN ADVISOR