The ShowNet NOC team recorded a tremendous number of events from the various security devices deployed across the network. Savvius Vigil received an average of more than 300,000 events per day, and captured 1.73TB of event-driven packet data during Interop. After examining these results, the NOC team decided to retrieve and analyze packet data from ten of these incidents. The NOC team then demonstrated how quickly they were able to isolate the data they needed from Vigil, and exported it to Savvius Omnipeek for rapid and effective investigation of the specific events.
“The demo here at Interop gave us a first-hand look at the value Vigil brings by enabling accurate analysis of incidents. It also proved that if you want to have a successful investigation, access to packet data is an absolute must.”