Network traffic analysis (NTA) is a method that mixes machine learning, behavioral modeling, and rule- based detection in detecting suspicious activities on a network.

NTA tools continuously analyze raw traffic and/or flow records, NetFlow for example, to build models that reflect normal network behavior. Alerts are raised in the event NTA tools detect anomalous traffic flow. In addition, to monitoring north or south traffic that crosses the enterprise perimeter, NTA solutions can also monitor east or west communications by analyzing network traffic or flow records received from strategically placed network sensors.

Nowadays, Cisco offers a best-in-class solution for workload protection.

Cisco Secure Workload (Tetration Analytics) Solution provides:

• an ability to gain visibility:
• of metadata from the packet header
• software inventory
• application insights and dependency
• policy life-cycle of workload segmentation (also known as "host-based firewall")
• an ability to reduce attack surface (agent tracks software vulnerability and stale ports and processes)
• . event detection and alerts
• streaming telemetry

Cisco Secure Workload (Tetration Analytics) Benefits:

• behavior-based application insight to automate security policy
• micro-segmentation
• identification of anomalies faster by using AI/ML
• reduction of the attacks by quickly identifying common vulnerabilities