Cisco ASA FireSIGHT Reporting

Posted in General on February 4th, 2016 by mike@plixer.com
Cisco ASA FireSIGHT Reporting

We will be demonstrating our new Cisco ASA FireSIGHT reporting at CiscoLIVE! in Berlin Germany this month. This appliances provides the deepest and richest detailed information that we have seen from any firewall. Our customers are going to love it.

Read more »

Michael Patterson
Founder and CEO

For a free 30 day trial of Scrutinizer, Download Now!

Tags: ,

Tracking Network Traffic in Real-Time Data Granularity

Posted in network security on February 3rd, 2016 by Scottr
Tracking Network Traffic in Real-Time Data Granularity

I talk to customers daily about forensic data granularity as it relates to collecting and reporting on NetFlow exports. I am often asked about how we store data and what is the resource impact on collecting flow data.

What is Data Granularity?

Data granularity is the level of depth represented by the data collected. High granularity means that you get a minute by minute detail accounting level of the transactions traversing the network. Lower granularity zooms out into more of a summary view of the data and transactions.

Why is this important?

Read more »

Scott Robertson
Sr. Solutions Engineer

For a free 30 day trial of Scrutinizer, Download Now!



Tags: , ,

Cisco ASR 9000 Configuration NetFlow Guide

Posted in Cisco Performance Monitoring, netflow configuration, sFlow on February 2nd, 2016 by Jeff

Cisco ASR 9000 Configuration Guide

One of the best parts about working in Tech Support for a company that analyzes NetFlow, is that I get the opportunity to work with a wide variety of vendors and models. Today most vendors are supporting at least one form of NetFlow. Whether that’s version 5, version 9 or IPFIX. No matter what version of NetFlow, we’re awarded the ability to capture and analyze the traffic on our network in almost real-time. Today I wanted to take a look at the founders of the NetFlow protocol, Cisco, and their Cisco ASR 9000 configuration.

 

Cisco ASR 9k Hardware

Cisco ASR 9k

One important thing to note about the ASR9k, is it supports sampled NetFlow. There’s a bit of controversy surrounding sampled NetFlow however. Some people prefer it because it alleviates the possible performance penalty incurred by enabling NetFlow exports. Others would prefer getting a more complete picture of their network traffic. Mainly this will depend on the traffic volume of your network. It is important to note though, that sample NetFlow will substantially decrease the CPU utilization needed to account for NetFlow packets. That being said, let’s dig into getting your Cisco ASR 9000 configured! Read more »

Jeff Morrison

For a free 30 day trial of Scrutinizer, Download Now!

Tags: , ,

Splunk Competitors

Posted in NetFlow Reporting on February 1st, 2016 by Brian
Splunk Competitors

Our IT department recently went through the process of evaluating Splunk competitors such as Elasticsearch and a couple of other vendors. Although we had our list of required features, the more pricey solutions demonstrated clear benefits over the cheaper more affordable systems.

Splunk vs Elasticsearch

Read more »

Brian

For a free 30 day trial of Scrutinizer, Download Now!

Tags: ,

Big Data and NetFlow

Posted in big data, Cisco NetFlow, cloud service monitoring on January 28th, 2016 by Alienor

Big data is popping up in all things IT these days.  It impacts a good percentage of business applications across all verticals from government to healthcare to media, and no surprise, it can have a significant impact on network performance as well.  More and more companies are collecting huge volumes of data—terabytes or even petabytes—from their network every day, and these volumes are expected to continue to increase.  IT teams need to figure out not only how to store big data, but how to recall and analyze it so that it can be put to good use. Read more »

Tags: ,