The product provides excellent insight into device traffic for different protocols, including SSL/TLS session monitoring that allows us identify various threats in real-time during incident response engagements with customers or internal teams.
We have also found out some improvements since we started using this service from ARMORPOINT. Nothing particular I can mention here but if you are looking forward to get insights about devices' behavior then it's worth considering! Device detection capabilities - ability to monitor suspicious connections both within organization perimeter and across enterprise extents via cloud services such as AWS CloudTrail; End point security solution which helps organizations detect advanced attacks against their applications by providing visibility over endpoint access control policies through user profiles and audit logs generated upon logon attempt.