NETSCOUT SYSTEMS announced enhancements to its suite of traffic visibility, data analytics and threat mitigation solutions for global network and data center operators. NETSCOUT’s Arbor Sightline solution with the integrated Threat Mitigation System (TMS) is used by service providers and large cloud operators to provide network-wide traffic engineering, peering analytics, traffic forensics and DDoS protection.

With the availability of the latest 9.0 updates, customers benefit from greater visibility and clarity into their network operations, enhanced anomaly detection, and improved automation for DDoS protection.

NETSCOUT’s Arbor Sightline, formerly sold as Arbor SP, analyzes NetFlow, SNMP and BGP telemetry data, annotating it with context specific to the customer network, users and traffic, transforming raw telemetry into smart data for actionable business insights into service and application performance, traffic engineering, capacity planning and security operations.

Sightline with Insight adds powerful visual analytics and a big data repository giving users an infinitely searchable, "what if" photographic memory of their traffic data. With the latest release, hours of analysis and investigation can be reduced to minutes through more flexible visualizations of traffic flows, unlimited filtering options and more intuitive workflows.

With this release, Arbor Sightline can intelligently and automatically manage available TMS mitigation capacity by dynamically shifting attacks among available Arbor TMS mitigation infrastructure as attack traffic volume changes. This prevents overloading network infrastructure and reduces operation staff time spent managing DDoS attack response. Arbor TMS can now mitigate twice as many simultaneous attacks allowing service providers to significantly grow their DDoS managed service customer base.

New features allow Arbor Sightline to detect carpet bombing DDoS attacks in as little as one second using enhanced fast flood detection and then automatically mitigate these attacks by determining which IP ranges are under attack at any given moment and dynamically diverting just that traffic to the Arbor TMS mitigation infrastructure.