Zero Trust for Unmanaged Devices

Armis provides the most comprehensive, unified asset inventory and device discovery available today. You see what each device is (make, model, location, and more) as well as the risks and software vulnerabilities on each device. Armis shares this information with your other Zero Trust systems to allow them to make better decisions about risk and network access.

Armis monitors each device’s data transmission and alerts when sensitive data is sent without encryption. Armis detects and alerts on data exfiltration attempts.

Armis lets you automate network segmentation by providing a wealth of information about every device in your environment including the device type, manufacturer, vulnerabilities, and each device’s communication needs. This information can be fed into your existing network infrastructure including firewalls and NAC systems. Once network segmentation has been established, Armis monitors actual traffic and alerts if/when unauthorized network bridges are created.

Armis monitors network traffic to detect behavioral anomalies, i.e. when a device is operating outside of its normal “known-good” baseline. This deviation can be caused by a device misconfiguration, a policy violation, abnormal behavior such as inappropriate connection requests, unusual software running on a device, or threat intelligence that indicates that the device has been compromised.

Armis works with your existing network, security, and management systems to trigger and automate incident response. Integrations include: wired network infrastructure (switches, routers), wireless LAN controllers, cloud integrations such as Palo Alto Networks Cortex and Cisco Meraki, firewall, network access control (NAC), SIEM, vulnerability assessment, ticketing and SOAR systems, CMDB and ITAM, and specialized systems such as the Check Point IoT Security Manager.

Armis integrates with existing identity service providers and associates users with devices on your network. That helps threat hunters and IT support personnel identify the names of users who are behaving in risky ways, for example using malicious software or visiting dangerous websites.

Armis discovers, classifies, and profiles both physical and virtual servers in on-premises and/or cloud environments. Armis monitors traffic between devices and cloud environments in order to detect behavioral anomalies or traffic patterns which could be indicative of a threat or data exfiltration.