LiveAction brings NetOps and SecOps together in a single platform. LiveNX draws a live network map with QoS metrics, LiveWire captures every packet and ThreatEye NDR finds attacks in encrypted traffic without decrypting it.
Solution Partner: deep integration with IOS-XE, Catalyst SD-WAN and Meraki.
Gartner
mentioned in the Market Guides for Network Performance Monitoring and NDR.
Live topology
A network map you can actually work with.
LiveNX automatically discovers the topology from routers, switches and SD-WAN controllers. The map shows applications, QoS classes, anomalies and test flows, all clickable and interactive.
DC · Tashkent HQ
SD-WAN Hub
Samarkand · 8 ms
Bukhara · loss 4.2%
AWS · us-east-1
Cloudflare · Edge
live.netops.flow · refreshed 12s ago
An illustration of the LiveNX interface. Real maps are built from NetFlow + SNMP + SD-WAN APIs.
Product family
Three tools in one platform.
NPM · NetOps
LiveNX
The core NPM platform. It collects NetFlow/IPFIX/sFlow from routers and SD-WAN, correlates it with SNMP and API telemetry, and shows tunnels, QoS classes and application sessions.
A network recorder and analytics appliance. Lossless capture at 1-100 GbE, Omnipeek analytics on top of packets and petabyte-scale retention for investigations and compliance.
Edge, X1 and X3 models, from branches to the data center
Deep drill-down: TCP retransmits, latency by hop
Index-based search: seconds per TB of pcap
NDR · SecOps
ThreatEye NDR
SaaS Network Detection & Response. Behavioral analytics and ML on metadata, Encrypted Traffic Analysis without decryption, MITRE ATT&CK mapping, correlation with EDR/SIEM.
C2 detection in TLS traffic (JA3/JA4, packet timing)
SIEM (Splunk, Sentinel, QRadar) and SOAR integrations
Use cases in Uzbekistan
Where LiveAction pays off quickly.
01
SD-WAN branch monitoring
Banks and retailers with dozens of branches get a live map of tunnels and loss/latency/jitter on every leg.
02
Finding out why “everything is slow”
LiveWire captures the packets and LiveNX shows application dependencies. Time to root cause drops from days to hours.
03
NDR without SSL decryption
ThreatEye works from metadata, with no MITM. Ideal for zones where regulation prohibits decryption.
04
Compliance pcap-retention
LiveWire stores full pcap for key segments for 30-365 days. Ready-made evidence for the regulator.
05
VoIP / video conferencing monitoring
MOS, jitter and packet loss for specific calls and Webex/Teams sessions. Voice SLAs under control.
06
One UI for NetOps+SecOps
Go from “the application is slow” to incident analysis in one move, without switching consoles.
CYBER BOOST × LiveAction
From PoC to production in a quarter.
We supply LiveAction to banks, telecom operators and large companies. We design NetFlow collection, deploy LiveWire based on the feasibility study and connect ThreatEye to your SIEM.
4 weeks
typical LiveNX PoC on 10-20 key network devices.
SIEM-ready
ready-made connectors for Splunk, Sentinel and QRadar.
RU/UZ
operator training in Russian and Uzbek.
L1–L3
local support and escalation to LiveAction R&D.
FAQ
Frequently asked questions about LiveAction.
What does LiveNX do?
LiveNX is a Network Performance Monitoring (NPM) platform. It collects NetFlow/IPFIX/sFlow, SNMP and Cisco/Juniper/Fortinet telemetry. On one interactive topology map it shows network performance, QoS, SD-WAN tunnels and latency for each application and branch.
What is ThreatEye NDR?
ThreatEye is LiveAction’s Network Detection & Response. It uses behavioral analytics, ML and Encrypted Traffic Analysis (ETA) to detect C2, lateral movement and exfiltration without decrypting traffic. It works from metadata, JA3/JA4 fingerprints and flow behavior.
How is LiveWire different from a regular recorder?
LiveWire is a high-fidelity packet capture appliance with Omnipeek analytics on top. It supports 1-100 GbE, lossless capture and petabyte-scale retention. It is used for forensics, troubleshooting and compliance, giving the SOC full pcap on demand.
Is LiveAction suitable for SD-WAN?
Yes, this is one of the main use cases. LiveNX shows all SD-WAN tunnels (Cisco SD-WAN/Viptela, Versa, Fortinet, Silver Peak, VeloCloud) and the loss/latency/jitter on every leg. It also tests policy enforcement and compares path performance in real time.
Does LiveAction run in the cloud or on-prem?
LiveNX and LiveWire run on-prem (physical or virtual installation) with a central console. ThreatEye is a SaaS service that receives flows from LiveWire, Gigamon or any mirror ports. A hybrid setup is also possible.
Request · LiveAction
A live topology demo in a couple of days.
Tell us what you need: SD-WAN monitoring, NDR, application troubleshooting or a compliance recorder. We will put together a plan and send you a configuration.