- Home
- Network Packet Capture Software
- EndaceProbe
EndaceProbe
Auckland, New Zealand
What it is
EndaceProbe continuously captures full network packets and keeps recorded history for investigating security threats, performance issues, and outages. It is offered as physical appliances or cloud and virtual deployments on AWS, Microsoft Azure, VMware, KVM, and Nutanix. Listed models provide 500 Mbps to 100 Gbps sustained recording, with storage from 1 TB to more than 3 PB. InvestigationManager supports centralized search and data mining, while EndaceCMS manages physical and cloud probes. Browser-based EndaceVision searches historical packets, and hosted Wireshark decodes data without downloading large PCAP files. The platform supports live capture, offline trace analysis, display filters, protocol decryption, and pcap, pcapng, and ERF formats. Integrations include Elastic and an API for other tools; appliances can host applications such as EndaceFlow. Security features include encrypted communications, stated FIPS 140-3 validation, Common Criteria certification for listed models, and DoDIN APL listing. Pricing is available on request.
For and against
For
- Continuous full-packet recording
- 500 Mbps to 100 Gbps listed capacities
- Browser-based historical packet investigation
- Hosted Wireshark decoding
- Physical, cloud, and virtual deployment options
Against
- Pricing is available on request
- Support covers current and previous major release
- Large-scale deployments require specialized infrastructure
The verdict
EndaceProbe centers on searchable packet history, broad deployment choices, and integrated analysis tools. Its capacity range and security controls suit organizations that need long-term network investigation.
Who it suits
It is aimed at security, network, and operations teams in sectors such as healthcare, finance, government, telecom, and broadcasting. Organizations can choose on-premises appliances or supported cloud and virtual deployments.
Plans and prices
EndaceProbe
On-premises appliances and cloud deployments; model capacities range from 500 Mbps to 100 Gbps sustained recording
Read 4 Oct 2026 · endace.com
On the record
- Deployment
- The product is available as physical appliances and as cloud or virtual deployments, including AWS, Microsoft Azure, VMware, KVM, and Nutanix options.endace.com · read 4 Oct 2026
- Hosted applications
- EndaceProbe appliances can host third-party tools, including EndaceFlow for NetFlow, using the platform's application hosting capability.endace.com · read 4 Oct 2026
- Hosting
- EndaceProbe appliances can host third-party tools, including EndaceFlow for NetFlow, using Application Dock.endace.com · read 4 Oct 2026
- Integrations
- Its APIs and Fusion Partner integrations connect packet history to security and performance monitoring tools, including commercial, open-source, and custom applications.endace.com · read 4 Oct 2026
- Intended users
- Endace identifies customer sectors including healthcare, retail, banking and finance, military, government, telecom, and broadcast and entertainment.endace.com · read 4 Oct 2026
- Investigation
- The browser-based EndaceVision application searches and examines historical packet data and includes Wireshark for packet decoding without downloading large pcaps.endace.com · read 4 Oct 2026
- OSm controls
- OSm uses hardened Linux releases, disables shell access, supports Radius, TACACS, and LDAP authentication, and provides role-based access control.endace.com · read 4 Oct 2026
- Packet analysis
- EndaceVision is browser-based, and hosted Wireshark can decode packet data on the EndaceProbe without downloading large PCAP files.endace.com · read 4 Oct 2026
- Purpose
- EndaceProbe provides continuous full packet capture and recorded network history for investigating security threats, performance issues, and outages.endace.com · read 4 Oct 2026
- Recording capacity
- Listed models range from 10 Gb/s to 100 Gb/s sustained recording for hardware appliances, with cloud and vProbe models also listed.endace.com · read 4 Oct 2026
- Recording scale
- Listed models range from 500 Mbps to 100 Gbps sustained recording, with listed packet storage from 1 TB to more than 3 PB.endace.com · read 4 Oct 2026
- Search and management
- InvestigationManager provides central search and data mining, while EndaceCMS provides central fabric management across physical and cloud probes.endace.com · read 4 Oct 2026
- Security
- Endace states that its probes use a cryptographic module for encrypted communications and have FIPS 140-3 validation, Common Criteria NDcPP v2.2e certification, and DoDIN APL listing.endace.com · read 4 Oct 2026
- Security certifications
- EndaceProbe models EP-94C8, EP-92C8, EP-2144, and EP-2184 have Common Criteria NDcPP v2.2e certification; Endace also states FIPS 140-3 certification and DoDIN APL listing.endace.com · read 4 Oct 2026
- Support
- The Americas support terms list 24×7×365 availability, phone and email support, remote diagnostics, software updates, and a five-minute initial phone response time.endace.com · read 4 Oct 2026
- Support limit
- The support terms cover the current and one previous major release of any software product.endace.com · read 4 Oct 2026
