ControlWatch sits passively on a span port and captures all traffic traversing the network. ControlWatch uses deep packet inspection to extract information buried within packets. State-of-the art machine learning techniques detect anomalous behavior on networks. Coupled with a comprehensive signature database, ControlWatch provides robust protection to industrial networks and components.
ControlWatch also contains a hybrid signature-and anomaly-detection engine, as well as vast array of ICS protocol parsers enabling monitoring of most networks.