Zerum NPB

Network Packet Broker (NPB)

Network Packet Broker (NPB) is a tool that offers packet filtering and forwarding based on user-defined rules. Simply put, NPB acts as a network traffic manager, collecting data from one or more links, filtering it and directing each packet to the appropriate network monitoring tool.

Direct traffic.
Optimize your resources

traffic filtering

It selects the traffic that should be sent to network monitoring tools such as NDR, aaNPM, etc. In this way, each of the solutions in the technology park receives only the data that is essential for its type of analysis.

data aggregation

It aggregates packages from different sources, including hybrid networks (on-premise and cloud), simplifying collection and analysis.

deduplication

Removes duplicate packages to avoid overloading analysis tools.

network security and segmentation

It helps protect sensitive information by redirecting traffic securely. Thus, each solution only receives the information it needs, acting as an additional layer of security and allowing each solution to only have visibility of what is intrinsically necessary.

cost reduction

By optimizing the flow of data and ensuring that monitoring tools work more efficiently, NPB contributes to reducing operating costs. With less unnecessary data to process, organizations can use fewer computing resources, saving on hardware and software licensing.

Questions and answers

Can NPB handle large volumes of traffic at high speed?

Yes. Professional NPBs, such as Zerum’s, are designed to operate in high-performance environments, supporting links of 10G, 40G, 100G or more, without packet loss. They maintain traffic integrity even in peak scenarios, guaranteeing reliable data delivery to monitoring tools.

O Network Packet Broker deve ser instalado in-line ou via espelhamento (TAP/port mirror)?

The NPB can operate non-intrusively, being fed by data from traffic mirroring (SPAN, TAP or port mirroring) – the most common and secure method, as it does not interfere with production traffic. However, in specific scenarios that require active traffic control, it can be configured in-line, although this approach requires more care, as the NPB becomes part of the network path and can impact availability in the event of failures.

Can I define specific traffic rules for each tool connected to the NPB?

Yes. NPB allows you to create granular filtering rules based on IP, port, protocol, VLAN, or any other packet metadata. This way, you can direct specific traffic to different tools, such as sending only DNS traffic to one tool and HTTP to another.

What impact does the NPB have on the detection of threats/operational bottlenecks by the security team?

By delivering clean, relevant and organized data, NPB improves the quality of analysis carried out by tools such as NDR, IDS, WAF, aaNPM and many others. This increases the efficiency of threat detection, reduces false positives and speeds up incident response.

Does NPB help to save resources on monitoring tools?

Yes. By delivering only relevant and already filtered traffic to each tool, NPB prevents solutions such as NDR, aaNPM or SIEM from processing unnecessary data, reducing CPU, memory and licensing usage – which translates directly into operational savings.

Do you want expert support
to identify and eliminate cyber threats?

Estamos aqui
 para ajudá-lo.

AI Applied to Cybersecurity

Threat Intelligence Database

Network Detection & Response (NDR)

Security Event Management (SIEM) and XDR

Security Orchestration, Automation and Response (SOAR)

Network Packet Broker

Real-Time Analytics for IT (aaNPM)

Monitoring, Detection and Response

Proactive Investigation of Stealth Threats

Evidence Preservation and Analysis

Public Info Analysis to Predict Risks

Specialized Trainings for Risk Prevention

Finding Flaws Before Exploitation

Security Evaluation via Attack Simulation

Automated Simulations of Real Attacks

Monitoring and Analysis of IT Operations