Skybox Network Assurance (NA)

Skybox® Network Assurance provides seamless visibility across physical IT, multi–cloud and operational technology (OT) environments, giving you the context needed to understand how network devices and security controls work together or leave you exposed. It continually ensures that the existing access in your infrastructure doesn’t exceed the desired access designed in your policies, and uncovers potential attack vectors, including those that could be used in lateral movement. Designed to support large and complex enterprise networks, Network Assurance empowers you to:

• Visualize and interact with a model of your entire network topology, assets and security controls

• Keep security zones and device configurations in continuous compliance and working to reduce your attack surface

• Troubleshoot network connectivity and identify root causes of network outages to ensure business continuity and continuous uptime

When managing a complex network environment — whether on–prem or in the cloud — you need to understand what the human eye can’t see. Network Assurance creates a model of your network so you can easily visualize complex security zones, network paths, compliance violations and configuration issues. And Network Assurance helps you focus on high–impact issues requiring immediate action to ensure continuous availability, security and compliance. BENEFITS Delivers Continuous Detection of Security Threats and Compliance Risks

• Collects data from 130+ network and security devices (see the full list on our website)

• Displays detailed, normalized configurations of firewalls and routers, as well as virtual assets

• Creates a network topology map that unifies traditional IT, public and private clouds and OT networks that can be exported to Microsoft Visio

Speeds Network Troubleshooting to Keep Business Services Running 24/7

• Minimizes downtime by reducing network configuration errors

• Troubleshoots network device configurations and previews changes before implementation

• Identifies root causes of outages quickly and accurately

• Improves visibility and workflow for network security teams

Uncovers Access Issues and Attack Vectors

• Correlates all ACLs (including those for cloud assets), security tags, routing rules, NAT, proxies, VPNs and more to find blocked or allowed access

• Incorporates asset vulnerability data for physical or virtual machines in network path analysis

• Analyzes network paths in public and private cloud environments for both north–south and east–west traffic

Maintains Continuous Compliance

• Performs continuous compliance analysis for configurations and security zone policies

• Normalizes security tags and other access rules throughout hybrid networks

• Enables security policy customization