Featured Posts

Various network nodes with security locks, representing encrypted traffic visibility
Network Security

How To Investigate Encrypted Traffic Without Decrypting It 

Most malicious traffic is encrypted, and in real environments, you usually don’t have the keys to inspect it. You can still investigate encrypted traffic effectively by ...

Read More
Representation of lateral movement: attack spreads through a network from a central point
Network Security

How To Detect Lateral Movement: A Step-by-Step Guide 

Blocks of data in a digital environment. Most of the blocks are clear but one is red, representing AI-powered anomaly detection
NDR

How Network Anomaly Detection Works (And Why It Matters)

All Posts

NetFlow Reporting

How to configure Palo Alto Networks NetFlow

Palo Alto Networks NetFlow support is now available and with the latest version of our NetFlow monitoring solution you can

Read More
Netflow

NetFlow vs. sFlow for Network Monitoring and Security: The Final Say

We’ve blogged about the differences between NetFlow and sFlow before but this debate continues to come up often enough

Read More
Network Operations

Barracuda IPFIX Support: Network Threat Detection

Earlier this year Barracuda Networks enabled IPFIX support on their NG Series firewalls. This export provides great visibility into

Read More
Configuration

Juniper XGS 5000 IPFIX Support: It’s really NetFlow

I got this google alert the other day and it caught my attention because it talked about configuring IPFIX

Read More
Netflow

Astaro IPFIX Reporting: Astaro NetFlow Support

Apparently some of our customers are calling in asking for Astaro IPFIX Reporting support.  It’s always fun to work

Read More
Netflow

SIEM NetFlow Support: Don’t Sell Yourself Short

This is a conversation I find myself having more and more lately so I thought it would make sense

Read More
Flexible NetFlow

Packet Length Report using NetFlow / IPFIX

We figured out how to report on packet length with NetFlow.  All you have to do is enter “match

Read More
Network Operations

How to run Cisco ASA ACL Reports: Netflow Security Event Logging

In this blog I’ll show you how to use Cisco ASA NSEL (aka Cisco ASA NetFlow) reporting to monitor

Read More
Network Operations

Detecting Worms and Malware with NetFlow: Network Threat Detection

Since 2005, Plixer and Cisco have been touting NetFlow (not Net Flow) as an IT Security and threat detection

Read More