Featured Posts

Various network nodes with security locks, representing encrypted traffic visibility
Network Security

How To Investigate Encrypted Traffic Without Decrypting It 

Most malicious traffic is encrypted, and in real environments, you usually don’t have the keys to inspect it. You can still investigate encrypted traffic effectively by ...

Read More
Representation of lateral movement: attack spreads through a network from a central point
Network Security

How To Detect Lateral Movement: A Step-by-Step Guide 

Blocks of data in a digital environment. Most of the blocks are clear but one is red, representing AI-powered anomaly detection
NDR

How Network Anomaly Detection Works (And Why It Matters)

All Posts

Network Operations

Cisco ASA v8.4(5) Advanced Reporting Webcast

The latest software update to the Cisco ASA v8.4(5) dramatically changed the way vendors report on NetFlow and NetFlow

Read More
Network Operations

Application Performance Monitoring: Out of Order Packets

Monitoring out of order packets has just gotten easier.  In the past, it has been a challenge to setup

Read More
Network Operations

NetFlow Generators: Enabling NetFlow Without NetFlow Support (Part #1)

Introducing NetFlow and IPFIX This article covers the benefits and capabilities provided by a new class of network monitoring technology called

Read More
Flexible NetFlow

Cisco Wireless NetFlow Support

Good news, with the 7.4 release, the Cisco Wireless LAN Controller will now start exporting Netflow v9 entries.  Together with

Read More
Network Operations

Cisco ASA 8.4(5) NetFlow Support

Have you upgraded your Cisco ASA to version 8.4(5) for the latest and greatest security features and NetFlow (NSEL)

Read More
Flexible NetFlow

NetFlow export over IPsec tunnel

Are you having trouble exporting encrypted NetFlow traffic over your IPsec tunnel?  When using a IPsec encrypted VPN, packets transferred

Read More
Netflow

Network Segmentation, Segregation, and Zero-Trust Design

The Zero Trust model is a relatively new network security design model that requires network segmentation and segregation of

Read More
Configuration

Blue Coat NetFlow Support : Packet Shaper FDR Exports

I’m sure many have known this for quite sometime but, I thought that Blue Coat NetFlow Support was worth

Read More
Network Operations

How to avoid IPFIX or NetFlow Sampling Vs. sFlow

Sampling traffic in an effort to represent the overall traffic pattern in theory is a sound idea.  In fact,

Read More
Network Operations

Microsoft Email Reporting Solution

Microsoft email reporting solutions are an important proactive responsibility that is often not addressed in many companies. Who are the

Read More