StealthWatch provides a powerful flow-based anomaly detection component to IronView Network Manager. Foundry completes Intrusion Defense component by adding StealthWatch for network behavior analysis. StealthWatch baselines network activity and detects anomalies, which may be indicative of malware. INM leverages sFlow traffic monitoring, embedded in Foundrys switches and routers, and open source, signature-based security applications and tools to deliver highly scalable security and threat mitigation without the cost of ancillary security sensors.”]
Source: https://www.darkreading.com/attacks-breaches/foundry-lancope-show-anomaly-detection