Description
This is the annual Splicecloud zero-touch subscription.
The Splicecloud zero-touch subscription does not require any hardware to be deployed on-site as it leverages the ability of the underlay network to export flow records. The export of flow records is widely supported by most modern network infrastructure vendors. Instructions on how to configure the underlay infrastructure to export and forward these records to Splicecloud are provided in the activation notification.
Splicecloud can process flow records from Netflow(IPFIX) and Sflow formats. Correctly configured flow exports will be visible in the Splicecloud dashboard within 5 minutes. The standard Splicecloud tenant can process up to 5k flow records from a zero-touch feed per hour. The Splicecloud analytics engine applies machine learning models to the observed flows, leveraging the near-deterministic nature of OT network communication patterns to keep watch over the OT network, highlighting only anomalies and outliers.
Features
• No hardware requirement
• Node and services detection
• Probe triage required to convert into behaviours
• Behavioural analysis
• Outlier detection
• One way channel, no back channel to OT network
• Node identification with companion agent
Requirements
• Underlay infrastructure must support netflow/sflow export
• OT Network infrastructure must be able to reach Splicecloud servers
• Customer to configure netflow/sflow exports and firewall rules required to reach Splicecloud
Splicecloud standard Terms and Conditions are available here.