RSA NetWitness Platform v11.3

 
PROJECT ID
C108
ASSURANCE LEVEL
EAL2+ALC_FLR.1
Security Target (ST)
 
Certification Report (CR)
 
PRODUCT NAME AND VERSION
RSA NetWitness Platform v11.3
PRODUCT TYPE
Network and Network-Related Devices and Systems
PRODUCT SPONSOR / DEVELOPER

RSA - The Security Division of EMC2

PRODUCT SPONSOR / DEVELOPER CONTACT DETAILS

10700 Parkridge Blvd. Suite 600 Reston, VA 20191

RSA NetWitness Platform v11.3 is a collection of appliances that form a security infrastructure for an enterprise network. This architecture provides converged network security monitoring and centralised security information and event management (SIEM). The TOE provides real-time visibility into the monitored network and long-term network data storage to provide detection, investigation, analysis, forensics, and compliance reporting. The product collects log and packet data from the network. Packet collection extracts metadata, reassembles, and globally normalises all network traffic at layers 2 through 7 of the Open Systems Interconnection (OSI) model. This data allows NetWitness to perform real-time session analysis; incident detection, drill-down investigation, reporting, and forensic analysis functions.