See behaviour at the network edge
LucidView receives DNS context and MikroTik traffic-flow metadata, which helps identify activity that should not be treated as ordinary browsing.
Behaviour-Based IPS-Style Protection
Intrusion prevention for suspicious remote access and zero-day-style attacks.
LucidView Behaviour-Based IPS-Style Protection helps detect and block known malware sites and malicious destinations, detect suspicious unauthorised remote-access behaviour and surface unknown-risk destinations through behaviour, category intelligence, a LucidView-maintained IP database and comprehensive destination analysis.
Behaviour, classification and IP intelligence for MikroTik networks.
What It Watches
Behaviour-Based IPS-Style Protection is not only signature-based.
LucidView looks for patterns that matter on a MikroTik network: risky destinations, known malware sites, direct-IP traffic, suspicious remote access, behaviour-based IP intelligence and destinations that need investigation.
Known malware sites and malicious destinations, including Google Safe Browsing evidence
Suspicious direct-IP and unauthorised remote-access behaviour
Network behaviour, Traffic Flow / NetFlow context and DNS context
A comprehensive behaviour-based IP database built and maintained by LucidView
Suspicious IP investigation to determine what destinations are
Comprehensive analysis systems designed to reduce false positives
Investigate suspicious IPs
For suspicious IP-only traffic, LucidView uses comprehensive analysis systems to determine what the destination appears to be without making operators manually decode every connection.
Maintain behaviour-based IP intelligence
LucidView builds and maintains a comprehensive IP database based on behaviour, then combines that intelligence with multiple risk signals to reduce false positives.
Mitigate risky activity early
The result is especially useful for spotting malicious remote-access behaviour, remote-hacker infrastructure and zero-day-style attacks early enough to reduce risk.
Remote-Hacker Focus
Useful when attackers do not look like normal web browsing.
Remote attackers often rely on direct IPs, command infrastructure, compromised servers, scanning and remote-access paths. LucidView is designed to surface those behaviours early enough for MikroTik administrators and operators to mitigate risk.
Especially useful for zero-day-style attacks
A zero-day-style event may not have a neat public signature on day one. Behaviour-Based IPS-Style Protection helps by combining known threat blocking, suspicious behaviour detection, a behaviour-based IP database and comprehensive destination analysis so unknown risky activity can be found and mitigated earlier.
Start from the Portal
Internet, MikroTik and Security.
Built into one portal.
Create a free account for your MikroTik operation, or use the demo path to review Content Filter, reports, MikroTik Management and IPS from the portal.
$3.84/month per profile, excluding tax30-day full-service free trial periodNo contract12 months for the cost of 10
