DATA SHEET
Guardicore Centra™ Security Platform
Granular Visibility and Segmentation Controls for Data Center, Cloud,
and Hybrid Cloud Environments
Enterprise IT infrastructure has evolved from traditional data centers to cloud and hybrid cloud architectures with a blend
of platforms and application deployment models. This modernization of IT is helping many organizations achieve greater
business agility and reduce infrastructure costs. However, it is also creating a larger and more complex security attack surface
that does not have a well-defined perimeter. Each individual server, virtual machine, or cloud resource is now a possible point
of exposure, and attackers are increasingly adept at moving laterally towards high-value targets once they find a way in.
The Guardicore Centra™ Security Platform is the simplest and most intuitive way to visualize activity in data center and
cloud environments, implement precise segmentation policies, protect against external threats, and detect possible
breaches quickly.
How It Works Highlights
Guardicore Centra collects detailed information about an organization’s IT • Real-Time and Historical Visibility
infrastructure through a mix of agent-based sensors, network-based data Map application dependencies and flows
collectors, and virtual private cloud (VPC) flow logs from cloud providers. down to the user and process levels on a
Relevant context is added to this information through a flexible and highly real-time or historical basis
automated labeling process that includes integration with existing data
• Flexible Asset Labeling
sources like orchestration systems and configuration management databases.
Add rich context with a highly customizable
The output is a dynamic map of the entire IT infrastructure that allows labeling hierarchy and integration with
security teams to view activity with user- and process-level granularity orchestration tools and configuration
on a real-time or historical basis. These detailed insights, combined with management databases
AI-powered policy workflows, make the creation of segmentation policies
• Granular, AI-Powered Segmentation
fast and intuitive. Centra’s segmentation capabilities are complemented
Implement best practice policies in a few
by a sophisticated set of threat defense and breach detection capabilities.
clicks using AI recommendations and
Centra is completely decoupled from the underlying infrastructure, so security precise attributes like processes, users,
policies can be created or changed without complex network changes or and domain names
downtime. In addition, a single set of Centra policies can protect applications
• Broad Platform Support
across both on-premises data center and public cloud environments.
Apply segmentation to an industry-leading
selection of modern and legacy operating
systems across bare-metal servers, virtual
machines, containers, or cloud instances
• Multiple Protection Methods
Augment segmentation with integrated
threat defense and breach detection
capabilities to reduce incident response time
Simple, AI-Powered Segmentation
Guardicore Centra automatically discovers application dependencies In the same visual interface, administrators can build segmentation
and flows and generates a visual map with custom labels, providing a policies quickly based on best-practice templates and AI-powered
contextual view of application activity and possible risks. policy creation workflows.
Reduce the Attack Surface, Secure Segmentation Simplified
Critical Applications
• Wide Coverage: Platform-independent segmentation policies • Visualize: Guardicore Centra’s best-in-class visibility
work consistently anywhere your applications run across public, automatically discovers and maps all application dependencies
private, or hybrid cloud environments. and communication flows with process- and user-level context.
This visualization, enhanced with automatic orchestration
• Deep Visibility: Application-aware visibility helps you understand
metadata synchronization, enables security teams to label and
application dependencies fully before defining segmentation
group all assets and applications quickly and streamline policy
security policies.
development.
• Intuitive, AI-Powered Workflows: A highly visual workflow,
• Build: Guardicore simplifies segmentation policy development
best practice policy templates, and powerful compound rule
and management. Best practice policy templates and AI-powered
logic make creating segmentation policies fast and intuitive.
workflows make it fast and simple to create highly effective
• Granular Policies: Software-defined policies use attributes like policies. Ongoing visibility into policy effectiveness avoids errors
users, processes, and fully qualified domain names to tightly and makes policy refinement easy.
control application flows and reduce the attack surface.
• Enforce: Centra’s built-in policy enforcement capabilities provide
consistent and reliable security regardless of the underlying
environment or operating system. Integrated breach detection
and response capabilities enable you to see policy violations in
the context of an active breach and identify the method of attack.
Integrated Breach Detection and Threat Defense
Guardicore Centra provides high-fidelity, context-rich security Process-level and user-level enforcement generates alerts and blocks
incidents with details on attacker tools and techniques, helping incident unauthorized activity, and an integrated threat intelligence firewall stops
response teams prioritize incident investigation and reduce dwell time. malware and other external threats from reaching your critical assets.
Beyond Segmentation: Breach Detection See the Entire Attack, Block Lateral
and Threat Defense Movements, and Reduce Dwell Time
• Multiple Detection Methods: A threat intelligence firewall, • Detect: Centra includes multiple detection and defense methods
reputation analysis, policy-based detection, and dynamic to protect cloud and data center infrastructure, including a
deception form a strong security net to redirect or contain threat intelligence firewall, reputation analysis that detects
live attacks. suspicious domain names, IP address and file hashes within
traffic flows, policy-based detection of unsanctioned activity,
• Global Intelligence Gathering: The Guardicore Global Sensor
and a high-interaction deception engine that disrupts attackers
Network, which includes over 10,000 sensors located in data
and captures attack details.
center and cloud environments around the world, streams early
threat information to Guardicore Labs for attack identification • Investigate: Centra collects the entire attack footprint, including
and analysis. the files and tools used and the arsenal of weapons that the
intruder activates, and performs deep forensics to expose user
• Integrated Response: Actionable intelligence and recording of
credentials, attack methods, propagation tactics, and more.
attackers’ specific tools and methods enable real-time breach
response and continuous improvement of segmentation policies. • Respond: Centra accelerates incident response with automatic
exports of indicators of compromise to security gateways and
• Detailed Forensics: Incident data is presented in a human-
security information and event management systems, single-
readable fashion alongside evidence, including indicators of
click updates to segmentation policies to remediate violations,
compromise, relevant artifacts, and the identifying characteristics
and the ability to trigger actions on virtual machines to prevent
of human attackers vs. bots.
the spread of damage.
Comprehensive Protection at Cloud Scale
Any Environment Simplify Security Enterprise Scalability
Protect workloads in hybrid Simplify security management and Performance
cloud environments with a with one platform that provides Start with focused protection of
combination of on-premises visualization, segmentation, your most critical digital assets
workloads, virtual machines, threat defense, and breach and scale up to protect your full
containers, and cloud instances detection capabilities enterprise without complexity,
across Amazon Web Services, infrastructure changes, or
Microsoft Azure, Google Cloud performance bottlenecks
Platform, and Oracle Cloud
Support for the Modern Enterprise IT Infrastructure
Guardicore Centra is designed to integrate with your infrastructure
Memory and System Requirements Container Orchestration & Engines Hypervisors
Management Server: 32 GB RAM, Docker, Kubernetes, OpenShift KVM, XenServer, Nutanix ESXi and
8 vCPUs, 530 GB storage AHV, Microsoft Hyper-V, VMware
Orchestration
ESX 5.1 or later for each server
Deception Server: 32 GB RAM, VMware vSphere and VMware
8 vCPUs, 100 GB storage vCenter Server 5.5.x and later, Intelligence-Sharing
VMware NSX Manager 6.1.x, Export Protocols
Aggregator: 4 GB RAM,
Nuage Networks, CloudStack, STIX, Syslog, CEF, Open REST API
4 vCPUs, 30 GB storage
Mission Critical Cloud, Openstack
Collector: 2 GB RAM, 2 vCPUs, (Vanilla/Mirantis)
30 GB storage
Security Gateways
Public Cloud Providers Palo Alto Networks, Check Point
Amazon Web Services, Microsoft Software Technologies, Cisco
Azure, Oracle OPC, Google
Cloud Platform
#1 Cloud Company
to Work For
About Guardicore
Guardicore is the segmentation company disrupting the legacy firewall market. Our software-only
approach is decoupled from the physical network, providing a faster alternative to firewalls. Built for
the agile enterprise, Guardicore offers greater security and visibility in the cloud, data-center and
endpoint. For more information, please visit [Link]
v32