DDI Guard Software by Cygna Labs Corp offers DHCP and DNS summary and packet-level traffic monitoring for improved network visibility, security, and forensics. Defending against sophisticated cyberattacks requires vigilance at all levels of your network, including the DNS-DHCP-IPAM (DDI) layer. DDI transaction data and history are vital in troubleshooting, network forensics, and cyberthreat intelligence. DDI Guard Software collects DNS and DHCP activity and forwards filtered data to third-party SIEM systems. It retains all DHCP/DNS transactions and enables forwarding of relevant packets, providing critical input for security event correlation and enhancing cyberthreat intelligence. Users can filter DDI data based on defined criteria to minimize unremarkable data and reduce SIEM ingest costs. DDI Guard Software provides DNS and DHCP activity collection with minimal server performance impact, capturing both queries and responses. It allows visibility into packet details for provisioning, server moves, troubleshooting, and network forensics. The solution enables bi-directional data collection, including real-time transaction tapping, offering in-depth visibility without compromising server performance. Customizable alerting supports proactive management. DDI Guard Software monitors DHCP and DNS transactions and generates alerts via SNMP or email for DNS and DHCP packets that meet defined criteria. It captures transactions for security and compliance, providing critical information for troubleshooting and cyber threat investigations. Deploy DDI Guard Software Archives for centralized, regional, or local data retention based on security and compliance policies. Add Archives for retention capacity or use automated rollover to overwrite older data. Supports cross-platform and multi-cloud. Installs on QIP and Diamond IP DDI appliances, Rocky Linux, or Microsoft Windows 2022. This versatility enables you to monitor, analyze, and investigate transactions across your network served by distributed DHCP and DNS servers, whether they are hardware, virtual, or cloud appliances.
