Featured Posts

Various network nodes with security locks, representing encrypted traffic visibility
Network Security

How To Investigate Encrypted Traffic Without Decrypting It 

Most malicious traffic is encrypted, and in real environments, you usually don’t have the keys to inspect it. You can still investigate encrypted traffic effectively by ...

Read More
Representation of lateral movement: attack spreads through a network from a central point
Network Security

How To Detect Lateral Movement: A Step-by-Step Guide 

Blocks of data in a digital environment. Most of the blocks are clear but one is red, representing AI-powered anomaly detection
NDR

How Network Anomaly Detection Works (And Why It Matters)

All Posts

Network Operations

Cisco Zone-Based Firewall Reporting

Today, I will be talking about the Cisco Zone-Based Firewall, including their differences and advantages compared to a Cisco

Read More
Netflow

Find Pokemon GO Network Traffic with NetFlow

Monitor Pokemon Go Network Traffic So there I am monitoring my network with NetFlow and a wild application appears!

Read More
Configuration

Configure Cisco ISE NetFlow

EDIT 5/30/18: There is a newer version of this article available. In order to configure Cisco ISE NetFlow, we’re

Read More
Flexible NetFlow

Cisco NGA Configuration Guide

Last week I was working with a customer who needed help with a Cisco NGA Configuration (NetFlow Generation Appliance). 

Read More
Configuration

Cisco UCS NetFlow Support

Cisco UCS Netflow Support was recently added with the release of version 2.2(2c).  NetFlow exports can be configured either

Read More
General

Cisco Zone-Based Firewall Logging Support

We recently upgraded a few of our Cisco IOS routers to version 15.4(2)T and enabled zone-based firewall logging, which

Read More
Network Operations

Calculating NetFlow Volume

Often these days, we’re asked for a general rule of thumb or guidelines that can help with calculating NetFlow

Read More
Network Operations

Cisco 7600 NetFlow Problems

The cutting edge Cisco 7600 Series is an edge router that delivers robust, high performance IP/MPLS features for service

Read More
Network Operations

PfSense NetFlow Export

Today I will show you how to configure PfSense NetFlow export on one of the more popular open source

Read More
Network Operations

NetFlow Observation Point: octetDeltaCount

Let’s talk about NetFlow observation point in Cisco NetFlow capable devices, particularly the octetDeltaCount collection. Ingress and egress Netflow

Read More