Cisco said Tuesday that it had reached an agreement to buy privately held security vendor Lancope in a $452.5 million cash and equity deal.

Once the acquisition closes, which is expected to take place by January, Lancope will be in Cisco’s Security Business Group, which is led by Senior Vice President David Goeckeler.

Cisco is well aware of Lancope’s security prowess, having previously partnered with the Alpharetta, Georgia-based company. In order to better detect anomalous threat behavior, Cisco paired Lancope’s StealthWatch with its NetFlow and Identity Services Engine (ISE).

By analyzing NetFlow, Internet Protocol Flow Information Export (IPFIX), and other types of network telemetry, the StealthWatch system provides network behavior analytics, threat visibility, and security intelligence to protect enterprise networks and endpoints from attacks such as APTs and DDoS, zero-day malware, and insider threats.

In addition to Cisco, Lancope’s customer list also includes HP, Gannett, the state of Connecticut, Westinghouse, and the Stanford School of Medicine. Lancope says it has seven U.S. patents and more than 130 proprietary algorithms.

Lancope has raised $24.6 million since it was founded in 2000. The company’s investors include Canaan Partners, Council Capital, and H.I.G. Ventures.

Cisco's other recent security acquisitions include OpenDNS, Portcullis, and Neohapsis. On Monday, Cisco announced it had reached a deal to buy Internet of Things analytics vendor ParStream, but financial terms weren’t available.