Hardware Appliance

The Scrutinizer Hardware Appliance provides the collection rates demanded by high-volume flow environments. With a collection rate of over 100,000 flows per second on each collector, Scrutinizer provides the capacity, enterprise-wide reporting, and threat detection necessary to meet the demands of the largest networks in the world.

This appliance has been engineered for optimal collection and reporting on all flow-based network traffic monitoring technologies such as NetFlow, sFlow, IPFIX, J-Flow, App-Flow, NetStream, and more. It comes pre-configured with Flow Analytics as well as the necessary related modules. For companies with big data, the Scrutinizer hardware appliance provides the greatest traffic awareness and promises to meet the network monitoring needs of your business. It ships pre-configured and optimized to deliver a turn-key solution.

Virtual Appliance

The Scrutinizer Virtual Appliance is a VMware/Hyper-V solution that scales to higher flow volumes. Although the feature set is similar to the Microsoft Software Appliance, the Virtual Appliance provides a more responsive interface and the underlying architecture is more in-line with our hardware solution. Since we support both VMWare and Hyper-V 2012, our virtual appliance fits seamlessly into your virtual environment, whether it is existing or planned. We can help you make this a smooth transition.

Minimum Specifications
100 GB
1CPU 4 Core 2GHz+
Operating System
ESXi 6, ESXi 5, ESX 4, ESXi 4, Hyper-V 2012

All Scrutinizer appliances monitor for missed flow sequence numbers. When every exported flow counts, this solution provides even greater confidence that all the flows and records are collected all the time.

vmware logo

vmware image

Hyper-V image

Our flow collection engineers have gone to great lengths to ensure that your organization can rely on the metrics presented in the dashboard. Accuracy counts and we guarantee it more than any other flow solution.

Windows Version

The Scrutinizer collector for Microsoft windows collects NetFlow, sFlow, J-Flow, NetStream, IPFIX and other flow technologies. It stores 100% of all flows from several hundreds of flow exporting devices to deliver end-to-end, hop-by-hop visibility into how the data traversed the network, where problems arose, and when. The collection of 100% of the flows allows our customers to uniquely identify security threats, trend usage and reduce troubleshooting time, as opposed to tools that only supply Top “N” reports.

Scrutinizer’s Flow Analytics compares flow streams against behavior-based algorithms that detect many forms of Network threats (e.g. Scans, DDoS, C&C, APTs). These flow streams are typically very small and will go undetected by most flow solutions. If a worm or other type of malware infiltrates the network, Scrutinizer’s forensic reporting interface allows administrators to track it down.

microsoft logo

Custom filters that watch for specific traffic patterns, both inbound and outbound, using flexible "include" and "exclude" logic sets are easily configured through the web interface. When when an event crosses a threshold or triggers an alarm, you can take corrective action. Alarms are user-configurable, which is critical to a proactive security strategy. Scrutinizer can pinpoint collateral damage, which ultimately improves overall situational awareness.

Scrutinizer is an industry-recognized and scalable flow solution with thousands of installations, making it one of the most widely deployed NetFlow solutions in the world.

Below are the minimum requirements for the downloadable Windows version of Scrutinizer.

Minimum Specifications
Dual Core 2GHz+
Operating System
Windows Server 2008/2012 Windows 7/8

NOTE: Please keep in mind that the more flows you push to Scrutinizer, the more resources the software will consume. It is recommended that users purchase the Scrutinizer Virtual or Hardware Appliance if high NetFlow volume (> 10K flows/second) is anticipated.

  • "I’d have to say the level of support and rich reporting Scrutinizer provides to Dell-SonicWALL customers is phenomenal. So far, Scrutinizer is the only product on the market to report on all the unique template data we export via IPFIX. For example, SonicWALL is able to provide insight to actual users, applications (not just port based ones), URLs, IPS events, and tons more via IPFIX. This functionality really helps network admins with regards to troubleshooting, reporting, and capacity planning. Further, Scrutinizer provides additional situational awareness of security and network events with the Flow Analytics module. Bottom line – if you want to get the best reporting out of NetFlow and IPFIX, look no further than Scrutinizer."