HAVARO Elementary
HAVARO Elementary service, an early warning service provided by Traficom NCSC-FI, alerts Finnish companies and organisations about the critical cyber threats. HAVARO monitors an organisation's Internet facing network traffic to detect attacks and malicious activity endangering the cyber security of the organisation.
SensorFleet is a technical solution provider and partner of NCSC-FI in producing the HAVARO Elementary service. We provide customers with a sensor that transfers network metadata for NCSC-FI analysis and a portal for receiving the alerts from the NCSC-FI. We will also be responsible for deployment and maintenance of the sensors and portal.
Service deployment
A sensor will be deployed on a network egress point, typically between the Firewall and Internet, and network traffic will be mirrored to the sensor. Sensor filters data from the network traffic and sends it to NCSC-FI for analysis. NCSC-FI will deliver alerts to a customer specific Fleet Insight portal instance.
Content of the service
NCSC-FI and SensorFleet produce the service in co-operation. SensorFleet provides the customer facing technical solutions and NCSC-FI produces the curated alerts and notifications to customers.
SensorFleet
We provide customers with either virtual or hardware based sensors, depending
on the customer network. Base fee covers traffic processing up to 1 Gbps.
Customer specific Fleet Insight portal will be deployed in a Finnish
datacenter. Besides SaaS usage, the portal supports export of data to
customer's SIEM.
We will be deploying and maintaining the sensors and portal as a turn-key
service.
NCSC-FI
NCSC-FI analyses the data produced by the sensors to detect cyber security
threats. Data will be retained for a fixed time period to also enable later
detections as new Threat Intelligence becomes available.
Alerts and notifications will be sent to Fleet Insight portal for customer’s
attention.
In the case of serious cyber threats, the experts of NCSC-FI will provide
support for the customer.
HAVARO protecting customers
HAVARO enhances customers protection against the cyber threats that can impact business continuity and critical business data, augmenting the other cyber security mechanisms deployed. Service is enhanced by the unique national and international Threat Intelligence available to NCSC-FI.
Benefits of the HAVARO Elementary service:
- NCSC-FI brings 20 years of experience on analysing network data for the threats, enhanced by unique Threat Intelligence
- Customer will receive curated alerts that are deemed by the NCSC-FI to be significant, making the response easier
- NCSC-FI support will be available for the serious cyber threats
- Full maintenance for the technical solutions by SensorFleet makes the usage of service easy
Additional services from SensorFleet
In addition to HAVARO Elementary service, SensorFleet NDR platform with the
comprehensive set of supported cyber security tools for IT, OT and SDN will be
available for the monitoring of customer’s internal networks. Sensors inside
the perimeter extend cyber visibility from North-South, provided by HAVARO, to
East-West visibility. Additional sensors will plug seamlessly with the Fleet
Insight portal.
Data from the sensors used for the internal network monitoring will not be
transmitted to, nor processed by, NCSC-FI. Extended visibility and forensic
data collection may, however, help with the investigation of cyber security
breaches.
Interested?
Please contact us: havaro@sensorfleet.com. We’ll be happy to provide more information.