CRYSTAL EYE FIREWALL
Managed Next-Generation Firewall

• Encrypted traffic metadata detection
  running on our multi-threaded, high-throughput engine delivers unrivalled network protection against both clear and encrypted threats without decrypting traffic.
• Integrated functions
  work together intelligently, such as the IPS dynamically creating a firewall rule when it detects multiple attacks from the same IP address, to automatically block that address to shut down the attack source and reduce the load on the IPS engine.
• Zero Trust Network Access (ZTNA)
  is a security architecture that ensures only traffic from authenticated users and devices are granted access to applications. It reduces the risk of a data breach via a comprehensive approach which includes identity verification, user access control and network segmentation.
• Cloud Access Security Broker (CASB) 
  delivers network-based and cloud-based security policy enforcement between users and cloud services via network segmentation to provide protection of SaaS applications.
• Identity & Access Management (IAM) 
  provides greater control of users on your network and forms a critical part of ZTNA and CASB protection. Crystal Eye offers a standalone Active Directory (AD) instance or can be integrated with an existing AD using LDAP or OAuth.
• Agentless Application Whitelisting (AWL) 
  blocks unwanted apps at the gateway to prevent them running on devices within the network.
• DNS.Insure 
  provides DNS sink-holing and managed DNS to deliver advanced DNS protection across the network and bringing DNS back under enterprise control, increasing network visibility and control.
• ForceField 
  identifies authentication failures across the network and blocks the source IP addresses of the failed login attempts to prevent brute force attacks and unauthorised access to systems.
• Zero-day Protection
  is delivered via our IPS engine which supports both vulnerability-facing signatures and threat-facing signatures to provide a more comprehensive level of protection.
• Backup PC
  allows single nodes to use the Crystal Eye appliance for a local backup solution to simplify the backup and restore process.

• BYOD & IoT 
  devices are protected with application filtering and protocol filtering at the gateway and network segments. On-premise protection is critical to cater for the expansion of IoT & BYOD across the enterprise. Our extensive security configuration capabilities deliver contextualised data across multiple security features dealing with encrypted traffic, including application-layer controls to manage IoT and BYOD to provide total visibility of the threats on your network.
• VoIP monitoring
  allows you to take control of voice traffic and Machine Learning will generate alerts when anomalies are detected. As the popularity of VoIP systems increases, they are being subjected to different kinds of intrusions, some of which are specific to such systems and some of which follow a general pattern of attacks against IP infrastructure. This app will monitor all VoIP traffic on your system.
• Deception
  capabilities allow you to create traps within your infrastructure by tagging decoys to trick attackers within your network for detection and notifications from internal attack vectors.
• Machine Learning (ML)
  delivers a range of automated defence features using defined playbooks to get you secure and compliant with little or no human intervention.
• User & Entity Behaviour Analytics (UEBA)
  uses ML to define behaviour profiles across network authentication (Kerberos), server connections (SSH) and file management (SMB) then alert when anomalies are detected to prevent attack pivoting.
• Threat Analysis & Threat Hunting
  is achieved by integrating various detection methods across the Crystal Eye platform to allow your security team, or ours, to pro-actively search security breaches, as well as being able to automate the threat hunting process via the platform.
• PCAP 
  provides full packet capture (PCAP) support which allows for greater control and easy analysis.
• Security Plan Wizard
  guides novice users through the configuration of the Cystal Eye platform to simplify the setup and configuration process and can be used in conjunction with the risk audit functionality.

• Integrated Risk Management
  gives you better control of your risk profile in real-time, by providing visibility of your entire organisation from on-premise staff to your remote workforce.
• Data Loss Prevention (DLP)
  allows you to tag documents within your environment and track if they are being copied or removed from your network as well as VOIP monitoring to minimise the likelihood of data being exfiltrated out of your organisation.

• Vulnerability Management
  covers vulnerability scanning and reporting as well as pro-active protection measures such as virtual patching to provide zero-day protection and reduce the operational burden on IT staff.
• Incident Response
  services seamlessly integrate alerts into Red Piranha’s managed services and professional services to provide rapid response to security incidents that occur across your network in real-time.

Passive Encryption Control
Our Advanced Passive Encryption Control technology protects networks with application-specific fingerprinting to establish traffic baselines allowing you to secure your network even with IoT devices present. 

Azure AD 
Use your Crystal Eye XDR appliance to capture extended Microsoft 365 signals useful in threat detection with all Microsoft subscription levels, usually reserved for corporate subscribers only. 

Wireguard
Crystal Eye XDR appliances also support the faster and more secure WireGuard protocol as well as traditional VPN technologies like SSL and IPSec.

Threat Hunting
Gain visibility and in-depth information and signals around your network to efficiently detect and locate threats or potential threats in your network with our comprehensive Threat Hunting Dashboard.

SD-WAN App

• Provides remote users with a secure connection back to the corporate network to access cloud-based apps, corporate data and internet access.
• A key foundation of the Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE) models allows you to securely extend your private networks for client-to-site and site-to-site communication over the public internet and to protect your cloud environments.

MDR App

• Captures events at the endpoints and sends the relevant data back to our Security Operations Centre (SOC) and centralised XDR data lake to correlate and report on relevant security activity and incidents.
• This forms the Endpoint Detection and Response (EDR) component of the overall XDR security platform.

CEASR App

• Ensures devices on your network conform to security policies based on standard security frameworks such as the Australian Signals Directorate's Information Security Manual (ISM) and the Essential Eight guidelines.
• Apply operating system policies across a range of devices and provide ongoing device monitoring to keep track of your compliance baseline in real-time.

DFIR App

• Offers host-based forensics by collecting and reporting on malicious activity across your devices and is complemented by our post-breach consulting to support rapid response during an outbreak.
• Assists in the efforts of understanding what has occurred during a breach, such as identifying the source and perpetrator of the attack.
• Delivers a very cost-effective solution for responding to an outbreak, at a fraction of the typical cost.