NUMBAT // Quarry
One tenant. The traffic, the policy that matched, and the configuration you are actually running.
Quarry reads the NSS feed as it arrives, and the configuration over OneAPI. Traffic and the policy that matched sit next to the config you are running. When those disagree, you see it the same day, not in the export someone filed last quarter.
Essential Eight, ISO 27001, NIST CSF and SMB1001 are checked against that live config. A control that passed in March can fail after one emergency change. The spreadsheet will not know.
The native console keeps the logs. It does not keep a year of them quick. Quarry takes the NSS feed onto our own hardware and holds up to 13 months hot. A 90-day question, a user, a URL, a category, a time, comes back in seconds. Older logs are kept for the search that is not this week’s.
Those same cuts run as a scheduled report or a dashboard, not only as a one-off search. A report that sits overnight in ZIA finishes in minutes here. A URL category, an application group, a location or a rule can be traced to every place it is used, instead of walking the policy tree by hand.
Global Information Technology Director, Trajan Scientific and Medical
The logs were already in the tenant. Reaching them was the delay.
“NUMBAT unlocked access to a treasure trove of information that we knew was there, but wasn’t easy to get to. It has enabled us to make decisions more quickly and with better certainty.”
NUMBAT is hosted in facilities run by one of the world’s most recognised data centre providers. We own the hardware. They run the buildings.
Both facilities have N+1 power and N+1 HVAC. Each supply has a spare, so one unit can drop and the load stays up. Access control is best in class. Entry to both the floor and the cage is controlled.
Connectivity into the facilities is redundant. One path can fail and the other still carries the traffic. From there, NUMBAT has access to the largest peering exchange in the region.
The NSS feed is stored there, with the configuration Quarry holds from the tenant. A query runs on those machines. The logs stay in those facilities to be searched.
See it on your own logs.
One tenant. No agent, no appliance, no migration.