One of the best moves you can make to detect security threats is to monitor unusual network traffic connections. Not every server needs to connect to every other server or even every workstation. Most companies lack a good understanding of what should be connected to what. The perfect monitoring tool for network traffic flows — to my knowledge — doesn’t exist, says Paul Venezia. He says Tufin’s SecureTrack is almost perfect, but it doesn’t monitor individual endpoints or monitor traffic rules.”]
Source: https://www.csoonline.com/article/2691818/stop-hackers-with-networking-monitoring-tools.html