Implementing Arista NDR software involves a streamlined process designed for rapid deployment and integration. The typical steps include:
Deployment Planning
Assessment: Evaluate the existing network infrastructure to determine optimal sensor placement and integration points.Amazon Web Services, Inc.
Objective Setting: Define security goals and requirements to tailor the NDR implementation effectively.
Sensor Installation
Placement: Deploy AVA Sensors at strategic locations within the network, such as core, perimeter, IoT segments, and cloud environments.
Form Factors: Choose appropriate sensor types—software on network switches, standalone hardware, virtual appliances, or cloud-based sensors—based on the network architecture.
Setup: Install and configure the AVA Nucleus, the analytics hub of the NDR platform, either on-premises or in a cloud environment.
Integration: Connect the Nucleus with deployed sensors to aggregate and analyze data.
Baseline Establishment: Allow the system to observe and learn typical network behaviors to reduce false positives.
Policy Customization: Adjust detection models and response policies to align with organizational security protocols.Arista Networks
Integration with Existing Security Infrastructure
Connectivity: Ensure seamless integration with current security tools and workflows to enhance overall threat detection and response capabilities.
Automation: Set up automated responses and alerts to streamline incident management.
Training and Operationalization
Education: Provide training for security personnel on utilizing the NDR platform effectively.
Arista NDR platform offers extensive customization capabilities to align with specific business needs. Key customization features include:
1. Integration with Existing Security Solutions
Seamless Integration: Arista NDR integrates with industry-leading Security Information and Event Management (SIEM) systems, business intelligence tools, ticketing systems, analytics platforms, endpoint detection solutions, and security orchestration tools.
Custom Workflows: The platform supports a comprehensive API, enabling the development of tailored workflows and integrations to enhance existing security processes. Arista Networks
2. Deployment Flexibility
Sensor Deployment: AVA Sensors can be deployed in various form factors, including software on network switches, standalone hardware, virtual appliances, or cloud-based sensors, allowing businesses to choose configurations that best fit their infrastructure.
3. Advanced Data Analysis and Threat Detection
Customizable Detection Models: The platform utilizes artificial intelligence AI and machine learning ML to detect and prioritize threats. It allows organizations to customize or develop their own adversarial models to address threats specific to their environment.
Threat Intelligence Integration: Arista NDR can incorporate external threat intelligence feeds to identify known indicators of compromise, both in real-time and retrospectively, enhancing the platform's adaptability to emerging threats.
4. User Interface and Reporting
Custom Dashboards: The platform offers tools for querying and analyzing data, including customizable dashboards and visual tools for summarizing and exploring query results, enabling businesses to tailor the interface to their specific monitoring and reporting requirements.
5. API Access for Extended Functionality
Arista Networks offers a range of training and support services to assist new users in effectively deploying and managing their Network Detection and Response NDR platform.
Training Services
Arista Cloud Engineer ACE: NDR Specialist Course
This intensive two-day course is tailored for security engineers and network professionals. It addresses current challenges in cybersecurity, focusing on detecting and mitigating emerging threats and attacks. Participants will gain hands-on experience with Arista NDR, learning to analyze network traffic and enhance threat-hunting capabilities. The curriculum covers:Arista Training
Support Services
Technical Assistance Center TAC:
Arista's TAC provides 24/7 support to ensure optimal network performance and reliability. Staffed by highly skilled engineers, the TAC offers swift responses and proactive solutions. Customers can reach the TAC via phone, email, or through the Support Portal. Notably, Arista's support services have achieved a Net Promoter Score of +87, reflecting high customer satisfaction.
Product Documentation
Arista maintains an extensive library of technical manuals, product bulletins, and guides. This resource aids users in understanding and configuring their NDR platform, ensuring effective deployment and operation.
Community Central
An interactive platform where users can engage with peers and Arista experts to discuss topics related to Arista NDR. It serves as a valuable resource for sharing insights, troubleshooting issues, and staying updated on best practices.
Arista NDR platform employs a suite of security measures to protect data and enhance organizational cybersecurity. Key measures include:
1. Encrypted Traffic Analysis
AI-Driven Inspection: Utilizes artificial intelligence to analyze encrypted network traffic without decryption, preserving data privacy while identifying applications, remote control activities, and file transfers.
2. Autonomous Threat Detection
Adversarial Modeling™: Detects sophisticated threats, including insider attacks, credential misuse, lateral movement, and data exfiltration, by autonomously identifying attacker tactics, techniques, and procedures.
3. Integration with Security Infrastructure
Collaborative Defense: Seamlessly integrates with existing security solutions, such as Zscaler Internet Access, to enhance threat detection and response capabilities, preventing command-and-control activities and potential data exfiltration.
4. Comprehensive Visibility
EntityIQ™: Autonomously discovers and profiles every device, user, and application within the network, including unmanaged and IoT devices, ensuring no blind spots in monitoring.
5. Deployment Flexibility
Arista NDR' policies on data ownership and portability are articulated in their Privacy Policy and Data Privacy Addendum.Arista Networks
Data Ownership: Arista Data Privacy Addendum outlines their commitment to data privacy and security, including policies and procedures for physical and logical access restrictions, data classification, access rights, credentialing programs, and record retention.
Arista NDR outlines specific terms and conditions regarding contract renewal and cancellation for their Network Detection and Response NDR services. Key aspects include:
Service Term and Renewal
Initial Term: The service term continues for the period purchased by the customer, as specified in the Purchase Order.
Renewal: Parties may agree to renew or extend the current service term by purchasing additional terms. If a customer does not renew before the term's expiration, Arista may require a reinstatement fee, in addition to the standard service fees, to renew or extend the services.
Termination
Termination for Cause: Either party may terminate the agreement if the other party materially breaches any term and fails to cure the breach within a specified period after receiving written notice.
Effect of Termination: Upon termination, all rights and licenses granted to the customer terminate immediately, and the customer must cease using the services and return or destroy all copies of Arista's confidential information.
End-of-Life (EOL) Policy
Support Duration: Arista provides 24x7 support for up to 3 years from the end-of-sale date of a product.
Software Bug Fixes: Available for up to 2 years from the end-of-sale date. After this period, Arista will make commercially reasonable efforts to assist customers in mitigating critical security vulnerabilities until the end-of-life date.
Arista NDR platform aligns with several compliance standards, enhancing organizations' adherence to regulatory requirements:
1. Center for Internet Security (CIS) Critical Security Controls Version 8
Arista NDR assists organizations in implementing multiple safeguards outlined in CIS Controls Version 8. It provides comprehensive network visibility by identifying and monitoring all network assets, including unmanaged and IoT devices. The platform also supports incident detection and response, aiding in compliance with these controls.
2. National Institute of Standards and Technology (NIST) Special Publication 800-207
Arista NDR supports the principles of Zero Trust Architecture as detailed in NIST SP 800-207. Utilizing its EntityIQ™ feature, the platform identifies, profiles, and tracks all devices, users, and applications on the network, facilitating the implementation of zero-trust strategies.
3. Federal Information Security Management Act (FISMA) and Federal Risk and Authorization Management Program (FedRAMP)
Arista assists government agencies in meeting compliance requirements associated with FISMA and FedRAMP. While specific certifications may vary, Arista's solutions are designed to support the stringent security standards mandated by these federal programs.
4. Encrypted Traffic Analysis for Regulatory Compliance: The platformcapability to analyze encrypted traffic aids organizations in tracking data transfers within the network, supporting compliance with various government regulations related to data security and privacy.
Arista NDR
By Arista Networks, Inc
