Intelligence Indicator Drivers
The intelligence indicator driver catalog provides information on detections by the Netify Agent. The same information is also available through the Intelligence API.
Intelligence Network Layer
The Intelligence layer identifies behavioral indicators within a flow, such as Tor usage, VPN traffic, or DNS tunneling, giving integrators insight into how traffic is behaving beyond what protocol and application classification alone can reveal.
As the most specific of Netify's network classification layers, Intelligence adds behavioral context to the IP Protocol, Protocol, and Application classifications already associated with a flow. Unlike those layers, which each produce a single classification, a flow can carry multiple Intelligence indicators at once, providing additional context about its behavior as the DPI engine analyzes the traffic.
Network Layers and Classification