 |
 |
 |
 |
 |
 |
 |
 |
 |
Directed Analysis Application Module
Key Features
- Vendor service and network agnostic
- Collects off-the-line at wire speeds
- Wireline to wireless, dial-up to broadband
- Secure and traceable access for multiple administrators
- Flexible targeting models
- API for integrating with third-party applications
- Industry standard output
Key benefits
- Carrier-grade speeds and performance
- Undetectable, passive collection
- Integration with NarusInsight Secure Suite or other third-party alert/threat/analysis/forensics applications
NIS Components
Capture
The Narus Intelligent Access Device (IAD) isolates an intercept subject's communications or call-identifying information from other individual's communication in a totally unobtrusive manner. Narus offers the High Speed Analyzer (HSA) and Intelligent Software Agent (ISA) for meeting the needs of capture.
- The High Speed Analyzer (HSA) provides a passive solution to collect off-the-line at wire speeds.
- The Intelligent Software Agent (ISA) provides an active solution to communicate directly with network elements. It offers a generic XML API for vendors without current lawful intercept support.
- Hybrid provides user-transparent access by ISA and HSA for cost effectiveness or vendor compliant limitations.
Targeting
Targets can be administered via the Targeting Console, the Targeting CLI or the Targeting API. All offer secure access to targeting administration functions.
- The Targeting Console is a java-based GUI.
- The Targeting CLI is a command line interface (CLI).
- The Targeting API is a corba-based API allowing third-parties to integrate with NarusDA.
Processing and Output
Intercepted data is processed by the processing layer where it is correlated, aggregated and delivered. The output of the processing layer consists of:
- Metadata - providing summary information on captured packets for use in link state analysis. Output is offered in flat-file, XML or IPDR formats.
- Packets - providing captured packets for use in investigation or forensics analysis. Output is offered in PCAP (tcpdump) format.
Integration
The NIS integrates seamlessly with other third-party forensics tools.
