Secureworks®
Taegis™ NDRCUSTOMER BENEFITS
Taegis NDR blocks 99%* of malicious

Monitor Traffic Across Your
Network to Rapidly Prevent,Detect and Respond to Threats

activity identified on the network acrossSecureworks Taegis NDR monitors network traffic entering,with over tens-of-thousands of curated

leaving, and within your network to reduce the risk of a breachby blocking 99%* of malicious activity identified on thenetwork. Through up-to-date countermeasures, AI-based
detectors and automated response actions, the security
burden on downstream systems and staff is greatly reduced.
Seamless integration with the Taegis XDR platform provides

both north-south (external) and east-west(internal) traffic.

Protection from the latest attack vectors
and maintained countermeasures, derived
from real-world threat intelligence, block 1
million network threats each month.

Seamless integration with the Taegis XDR
platform available to correlate telemetry
across different threat vectors (endpoint,central management and more holistic visibility andnetwork telemetry, etc.) that would haveprotection across the complete attack surface.

not necessarily been elevated whenanalyzed individually.

Reduce Risk with Integrated Threat
Prevention and Response

AI engine analyzes network traffic foranomalous application and port usage,

With the continued evolution of cloud applications andidentifying potential threats before they

pervasiveness of remote work, threat actors can easily mask

can cause harm, such as data exfiltration

their behavior in increased network traffic. Organizations needor ransomware attacks.

a layered cybersecurity defense, especially those without theresources, central governance and strong policies to ensureAvailable automated response actions

100% up-to-date coverage at the endpoint.

eliminate manual effort to improve
response rates to emerging threats.

“Taegis NDR empowers us to proactively
mitigate cyber risks to our business. It adds
an extra layer of intelligence that fortifies
our cyber defenses. When Taegis NDR
sends us an alert, I know there’s an issue so I
can quickly assign my resources to tackle itand protect our business.”
Steve Hey Senior Vice President of Information Technology,Infrastructure, and Operations, National 9/11 Memorial & MuseumEliminates the burden of device
management, saving your team time andresources that can be deployed elsewhere.

Deep packet inspection (DPI) provides formore comprehensive detection of network
threats.

Central visibility in the Taegis platform forreporting and unlimited chat support.
* as measured across Secureworks entire
customer base

DATA SHEET | SECUREWORKS TAEGIS NDR

Taegis NDR performs in-line deep packet inspection of inbound andoutbound network traffic using multiple integrated defense
technologies to identify and block real security events requiring
attention, without impacting network performance.

WHY IS SECUREWORKSTAEGIS NDR DIFFERENT?

Secureworks rich history of tracking and preventing threat actor

AI-powered detections uncover

behavior, combined with unique insights based on the trillions of events

advanced threats and malicious

we process, deep security research, and our adversarial testing and IR

behavior

engagements, have resulted in over tens-of-thousands of curated andmaintained countermeasures. Those block 1 million network threats

Countermeasures updated daily byeach month for our customers, while built-in AI analyzes network

the Secureworks Counter Threat

traffic for anomalous application and port usage in order to identify

Unit to automatically protect

potential threats before they can cause harm.

against the latest threats.

Taegis NDR can deploy both physically and virtually for full attacksurface coverage without impacting network flow. Countermeasures
are updated daily by the Secureworks Counter Threat Unit™ toautomatically protect against the latest threats, and Taegis NDR
eliminates the burden of device management, including themanagement of rules and signatures, which saves your team time andresources that can be deployed elsewhere.

Full integration into Secureworks
SOAR capabilities for remediation
actions including:• Block/Shun IP address: Blockunwanted traffic from specific IPaddresses or a range• UnBlock/Trust IP address: Allow

Central visibility within the Taegis platform provides reporting andtraffic from trusted IP addresses

unlimited direct access to our SOC through chat, and optional

or a range

seamless integration with Taegis XDR correlates network activity with• Validate Rules: Ensure rules

endpoint and cloud threats for enhanced lateral movement detection.

applied to the device areformatted properly• Get Job Status/Health: Check thestatus of Taegis NDR to ensure
operating as expected• Get Devices: Fetches lists of all
NDR devices to ensure compliancePre-built reports already available
for Executive Summary and ChangeManagement Reporting
For more information, call 1-877-838-7947 to speak to aSecureworks security specialist. secureworks.com

Available integration with the Taegis
XDR Platform provides more holistic
visibility and enhances lateral

Secureworks (NASDAQ: SCWX) is a global cybersecurity leader that secureshuman progress with Secureworks® Taegis™, a SaaS-based, open XDR platform
built on 20+ years of real-world detection data, security operations expertise, andthreat intelligence and research. Taegis is embedded in the security operations of
thousands of organizations around the world who use its advanced, AI-driven
capabilities to detect advanced threats, streamline and collaborate on
investigations, and automate the right actions.

©2024 Secureworks, Inc. All rights reserved. Availability varies by region.

movement detection and enables
richer investigations for improved
protection.