Packet Forensics Network Effects Engine & cQuery is This page describes two separate Packet Forensics products.
Network Effects Engine (NEE) is an inline network defense system built on deep packet inspection. It allows administrators to define policies, using an XML-based policy language, that describe the conditions permitted for traffic entering and leaving a network. The engine can operate on traffic in transit, disarming malicious content at the packet level while allowing legitimate traffic to pass. It can ingest external network intelligence, intrusion detection alerts, or other third-party data sources to inform its policy decisions, in addition to Packet Forensics' own intelligence feeds.
cQuery Service is a directory/DNS and WhoIs lookup service designed to prevent disclosure of a client's identity or interests during Internet queries. Normal DNS and WhoIs queries can reveal operating system, software, browsing habits, and correspondents to ISPs, DNS infrastructure operators, or third parties, since these queries are typically unencrypted. cQuery anonymizes these queries, caches large volumes of DNS/WhoIs data to avoid re-querying public infrastructure, automatically determines the correct WhoIs source, applies DNSSEC and cache poisoning defenses, encrypts transactions, and refreshes cached data automatically. It is delivered as a cloud service or as a security-hardened on-premises appliance, with Windows, Mac OS X, and web-based clients, plus an API for C, Perl, and PHP.
Key advantages include cached queries to reduce public lookups, anonymization of query traffic, automatic WhoIs source determination, built-in DNSSEC/cache poisoning defense, automatic cache refresh, global pre-caching of top queries, encrypted transactions, and multiple client options.
Inline packet-level network defense engine paired with an anonymized DNS/WhoIs lookup service, developed by Packet Forensics. It is a Network Security solution designed to help security teams with DNS Security, Encryption, Anonymity.
