Real-time threat prediction, detection and blocking
NTX is Nominet’s network detection and response platform, purpose built to analyze billions of DNS data packets in real time, pinpointing and eradicating malicious activity quickly and effortlessly.
An Introduction to The Nominet NTX Platform
Benefits of the NTX Platform
- Proactive real-time threat blocking designed to cut malicious activity off instantly.
- Rich APIs which allow DNS threat intelligence to be integrated into existing SIEM and management reporting systems, speeding up response times and providing intelligence for post-breach forensics.
- NTX gives you visibility and actionable threat intelligence, highlighting suspicious events and giving you the ability to respond.
- Delivered either in-cloud or on-premise, NTX cloud environments can be deployed in a matter of minutes.
- The NTX platform is built to detect malicious activity in seconds so that you can start protecting your business straight away.
- Ground-breaking technology uses unique compression, analysis and machine learning algorithms to instantly detect single malicious packets hidden in vast quantities of legitimate enterprise data, before they harm your business.
- Custom dashboards tailored to your business needs and an intuitive web control panel give you unprecedented visibility of your DNS traffic and any associated threats.
- Daily logs of blocked domains associated with threats such as malware, phishing, and data exfiltration.
- Periodic analysis of service usage and regular service management reports including identification and prioritisation of risks and vulnerabilities.
- World renowned DNS analysts with over 20 years’ experience running the .UK namespace, now a part of Critical National Infrastructure.
- Award-winning service delivery teams offering around the clock access to online documentation, expert support and dedicated account management.
- Chosen by UK Government to run DNS analytics services across the UK public sector, we are proud to be part of the Active Defence Programme run by the National Cyber Security Centre.
How it Works
It takes just minutes to install one of our NTX Collector components on your network. This gives us visibility of your DNS traffic for real-time monitoring and action.
Threats are found and instantly blocked by our unique algorithms, giving your organization immediate protection from known and unknown threats.
All captured threats are visually displayed by attack type, category and IP address. This intelligence is easily integrated into your SIEM platform to enrich data and speed up response time.
Explore
NTX uses threat intelligence to identify the “known bad” before applying our machine learning derived algorithms to identify the “unknown bad”, immediately cutting the window of compromise on your network.
A “heat map” of all the malicious or suspicious activity on your network at any given point in time.
NTX orchestrates the security data into categories to enable policies to be automatically applied, and prioritizes your action items for further investigation and threat hunting.
NTX detects and blocks malware, phishing, “command and control” and data loss activity in real time.
NTX predicts the newly observed domains that could cause harm and blocks them from your network.
Investigate packet information to understand more about the malicious domain.
Review actions for categories or per domain. Granular policy allows you to prevent attacks from subdomains, whilst maintaining legitimate workflows at the top level domain level.
Understand the traffic patterns of the malicious domain.
Understand which endpoints have attempted to connect with the malicious domain.
Export your IP list for correlation with your DHCP server information to pinpoint and isolate endpoints for further investigation.
See all your DNS traffic (not just the bad) in one place and understand what normal looks like on your network.
Produce PDF reports for executives, operations and analysts to a level of detail and date range that suit your requirements.
See what IPs are visiting websites.
Review deep packet information for threat hunting activity.
Understand what the “top” website destinations are from your network.
Events Dashboard
The NTX dashboard provides an at-a-glance overview of the DNS traffic in your organization and any suspicious events hidden there.
Get straight to the issues that matter and fix them fast.
Events Browser
Search and view recent and historic events detected by the system.
Get straight to the cause, in real time or historically, for a forensic investigation.
Automated Reports
Collates detailed events detected by NTX, IP addresses of affected machines, risk profiles presented by the events and provides recommended remedial actions.
Take the hassle away from reporting. Board-ready reports at the click of a button.
Custom Views
Build customized dashboards or detailed views of events in your DNS infrastructure. For analysts and power users with a deep understanding of DNS protocol.
Work the way you want to, built around your workflow.
Policy Management
Customize policy beyond the defaults provided and apply these to your DNS server.
Find it, understand it, block it. All with a single click.
SIEM Integration
DNS: The Best Kept Secret in Cyber Security?
Get in Touch
For more information on how Nominet can help secure your business, please submit your details, or contact us on:
UK: +44 (0) 1865 332 255
US: +1 202 821 4256
Email: info