🏁 Quick Start Guides

The quick start guides walk you through setting up and starting to use Fusion. The first step is to integrate with a cloud provider.

• Getting started with AWS
• Getting started with Azure
• Getting started with GCP
• Getting started with Detections and Events
• Getting started with Dashboards

✋ Need More Support?

If you have questions or issues, go to our Need More Help? section to contact us or join our Netography community.

🦉 The Basics

Netography is here to help you get started using Fusion.

Fusion is a SaaS network observability and security detection platform. It works by ingesting network traffic logs and enriching them with context. It then provides security detections and analytics based on the enriched network metadata it has collected. You can use the Fusion Portal to create and view dashboards and conduct incident investigations, the Fusion API to programmatically interact with the system, and create Response Policies to deliver events from Fusion to other systems (e.g., SIEM, SOAR, or other 3rd party products).

Netgraphy Fusion supports the following flow log types:

• AWS VPC flow logs, AWS Transit Gateway flow logs
• Microsoft Azure NSG flow logs, Microsoft Azure VNet flow logs
• Google Cloud Platform (GCP) VPC flow logs
• Oracle Cloud (OCI) VCN flow logs
• IBM Cloud VPC flow logs
• NetFlow v5, NetFlow v9, NetFlow v10 (IPFIX), sFlow

Netography Fusion supports the following DNS resolver log types:

• AWS Route 53, GCP Cloud DNS, more coming soon

Netography Fusion supports the following context enrichment sources:

• Cloud Providers (AWS, Azure, GCP, IBM, Oracle)
• Asset Management (Axonius, Device42, RunZero, Tanium)
• Endpoint Protection (Crowdstrike, Microsoft Defender, SentinelOne)
• Cloud Security (Wiz), Vulnerability Management (Tenable), OT Security (Claroty)
• Generic Sources (S3, CSV, Local Files, REST API, Custom Modules)