The primary goal of the PANDDA Project is to integrate CESNET open-source tools into a user-friendly and ready-to-use ecosystem. It is designed to be used in both high-speed networks and smaller infrastructures on your own hardware, thus minimizing the costs of deployment. The included analytical tools deliver real-time insights into the ongoing traffic and automate security asset management.
No expert knowledge required
Gain full visibility into network traffic
Automatically map and track active devices
Optimized for both large and small networks
PANDDA will help your organizations to enhance their cybersecurity posture, automate network oversight, and protect infrastructure against cyber threats—without the complexity of traditional security solutions.
PANDDA integrates an IP flow monitoring tool that supports both standard 1Gbps network interfaces and high-speed 100Gbps interfaces through DPDK.
IP flows are analyzed to extract valuable security intelligence. With PANDDA, you gain deep visibility into the connected devices within your infrastructure—through passive data collection, without actively scanning the whole network. The asset management analysis provides insights into open ports, DNS and SMTP open resolvers, and SSH clients. Additionally, it identifies the role and activity of each device within your network.
PANDDA includes a graphical configurator wizard that simplifies the setup of your monitoring infrastructure. Just enter the IP addresses and credentials of your servers, and the wizard will automatically check the servers, suggest the optimal configuration, and install all necessary tools. Rest assured, all sensitive credentials are securely stored and encrypted using the password you provide.
PANDDA supports flow forwarding for external data retention, ensuring seamless integration with external flow collectors that support IPFIX.