{"id":4871,"date":"2022-12-30T13:53:30","date_gmt":"2022-12-30T18:53:30","guid":{"rendered":"https:\/\/solutionsreview.com\/network-monitoring\/?p=4871"},"modified":"2022-12-30T13:56:40","modified_gmt":"2022-12-30T18:56:40","slug":"key-takeaways-2022-gartner-market-guide-for-network-detection-and-response-ndr","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/network-monitoring\/key-takeaways-2022-gartner-market-guide-for-network-detection-and-response-ndr\/","title":{"rendered":"Key Takeaways: 2022 Gartner Market Guide for Network Detection and Response (NDR)"},"content":{"rendered":"

\"NDR\"Gartner recently released its 2022 Market Guide for Network Detection and Response (NDR), meant to cover emerging markets currently in limbo. The editors at Solutions Review take a look at the key takeaways.<\/strong><\/em><\/p>\n

Analyst house Gartner, Inc. recently released its new\u00a0Market Guide for Network Detection and Response (NDR)<\/em><\/a>. The researcher\u2019s\u00a0Market Guide series<\/a>\u00a0is meant to cover new and emerging markets where software products and organizational requirements are in limbo. Gartner\u2019s Market Guides can be a great resource for understanding how a fledgling space may line up with current and future technology needs.<\/p>\n

According to Gartner, NDR is defined as products that detect abnormal system behaviors by applying behavioral analytics to network traffic data. They continuously analyze raw network packets or traffic metadata between internal networks (east-west) and public networks (north-south). It can be delivered as a combination of hardware and software appliances for sensors, and a management and orchestration console in the form of on-premises software or SaaS. NDR complements other technologies, which trigger alerts primarily based on rules and signatures, by building heuristic models of normal network behavior and spotting anomalies.<\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

When choosing an NDR platform, security and risk management leaders should complement existing detection solutions by implementing NDR tools to detect abnormal behaviors and provide investigation capabilities for post-breach activity, identify gaps in current detection and response practices to determine if the anomalies that NDR can detect fill the most pressing detection gaps, and compare NDR vendors by defining rationalized metrics and evaluating how these NDR tools positively impact threat detection, security operations center (SOC) productivity and automated response. Organizations with specialized detection use cases would benefit from mixing known vendors with emerging local players in their shortlists.<\/p>\n

Gartner highlights the following vendors in the NDR market: Arista Networks, Cisco, Corelight, Darktrace, ExtraHop, Fidelis Cybersecurity, Gatewatcher, Gigamon, IronNet, Plixer, Progress (Flowmon Networks), QI-ANXIN, Sangfor, Stamus Networks, Tencent, Trellix, Vectra, and VMware.<\/p>\n

Trends in the NDR market, according to Gartner, include:<\/p>\n