Anomaly Definition

Note

This feature required Professional or Enterprise Edition

Anomaly Definition monitors various unusual situations that can pose significant threats to the network or endpoints, enabling quicker and more effective responses when a risky situation occurs. Genian NAC identifies risky endpoints by inspecting network traffic or monitoring abnormal endpoint behavior. Administrators can use predefined risk events to detect endpoints exposed to major risks such as Ad Hoc networks, ARP Bomb, ARP Spoofing, MAC/IP Clone, Port Scan, and more.

• Understanding Anomaly Detection
• Creating Anomaly Definition
• Detecting Anomalies
• Blocking Risky Nodes
• Risk Detection Pre-configuration