Session Correlation

A session is information about the actors behind your network traffic that applies for a limited and specific period of time. Session information can be used to answer questions such as: "Who is in the New York office?" or "How many people are in meetings?" or "Are users accessing this resource according to company policy?"

Session correlation is a set of tools that capture session information to not only identify the assets involved in network traffic, but also the users, or actors, behind the traffic. (See Understanding Session Correlation.)

Session correlation makes it possible to map users to assets at specific time periods. This is especially valuable for identifying who is doing what on your network from which assets and when, especially when the asset IDs themselves may be variable (such as DHCP or VPN logins).