Monitor Snitches on Rogue Endpoints
ENDFORCE has announced a new tool designed to spot rogue endpoints and alert network administrators.
Called Informant, the tool passively monitors network traffic through a series of software monitors and sends real-time reports to administrators when it spots unauthorized endpoints on the network.
A number of pre-defined reports are included with the software to ease analysis, and a centralized Web interface permits administrators to exempt endpoints from triggering alerts based on IP or MAC addresses, and by subnet or range.
Informant was designed as a companion for ENDFORCE Enterprise. Enterprise-monitored endpoints are automatically exempted from reports sent out by Informant.