The NDR inspects 100% of traffic: north-south (inbound/outbound) and east-west (internal). Click a flow to see its analysis and the probe's verdict.
North-south flows connect your network to the outside. There the NDR detects connections to malicious servers, exfiltration attempts and contact with attack infrastructure.
East-west flows travel between your machines. That is where an attacker who is already inside gives themselves away: lateral movement, propagation, internal reconnaissance, invisible to a perimeter firewall.