How NDR and SASE Complement Each Other to Strengthen Network Security
Summary
The article explains how NDR and SASE provide complementary network defenses, and describes Darktrace 6.3 integrations with Zscaler and Netskope for faster response and visibility into tunneled traffic.
Key points
- NDR monitors network traffic for suspicious behavior, including novel attacks and insider threats; SASE applies access and web-traffic policies.
- SASE may miss unknown threats and unmanaged devices, while NDR can help identify policy gaps and activity that passes access controls.
- Combining the technologies can support threat detection, investigation, and containment while adding context to alerts.
- Darktrace 6.3 lets customers using Zscaler quarantine ZPA-connected devices by shutting down access for compromised accounts.
- Darktrace says its Netskope Cloud TAP integration provides visibility into and analysis of tunneled traffic.
Article Details
- Topic
- How NDR and SASE complement each other, including Darktrace integrations with Zscaler and Netskope.
Vendors
DarktraceNDR solutions, such as Darktrace / NETWORK, are designed to detect, investigate, and respond to suspicious activities within any network. By leveraging machine learning and behavioral analytics, NDR continuouslyNetskopedevices. This expands on existing Darktrace integrations and partnerships with SASE vendors such as Netskope and Zscaler.ZscalerThis expands on existing Darktrace integrations and partnerships with SASE vendors such as Netskope and Zscaler.
Products
Darktrace / NETWORKNDR solutions, such as Darktrace / NETWORK, are designed to detect, investigate, and respond to suspicious activities within any network. By leveraging machine learning and behavioral analytics, NDR continuouslyDarktrace Autonomous ResponseWith Darktrace 6.3, customers using Zscaler can now configure Darktrace Autonomous Response to quarantine ZPA-connected user devices at machine speed. This provides a powerful new mechanism for containing remote threatsNetskope Cloud TAPof geographies, SaaS applications and remote worker devices, Darktrace also now integrates with Netskope Cloud TAP to provide visibility into and analysis over tunneled traffic, reducing blind spots and enablingZscaler Private Access (ZPA)With Darktrace 6.3, customers using Zscaler can now configure Darktrace Autonomous Response to quarantine ZPA-connected user devices at machine speed. This provides a powerful new mechanism for containing remote threats