Executive summary In today’s complex IT environments, Network Detection and Response (NDR) solutions are crucial to identify, assess, and respond to cyberthreats. Many NDR solutions rely on deep packet inspection (DPI) technology, which utilises traffic mirroring to analyse the payload of each packet passing through a mirrored sensor or core switch. DPI has become popular since it provides very detailed traffic analysis. However, this approach requires designated hardware sensors and large amounts of processing power, … Continue reading A comparison of NDR solutions: Deep packet inspection (DPI) vs. metadata analysis