Most companies have a VPN set up to allow users remote access to the company network, but that leaves a blind spot on the network—until now. … [Read more...] about How to Configure Cisco AnyConnect to Send Flow Data
Configuring Scrutinizer for LDAP Authentication
Local authentication into software or even hardware is useful for both the end user and the organization as a whole. Logging in with your network LDAP credentials limits the number of passwords you need to keep track of, and serves as an added security … [Read more...] about Configuring Scrutinizer for LDAP Authentication
Splunk NetFlow Support: Viewing Your NetFlow in Splunk
The last time we showed you how to seamlessly integrate Splunk with Scrutinizer was all the way back in 2015. Since then, we have made quite a few changes to Scrutinizer and how our third-party integrations work. … [Read more...] about Splunk NetFlow Support: Viewing Your NetFlow in Splunk
NetFlow Configuration Guide: Best Practices
One of the things I do daily with customers is help them configure NetFlow on their network devices. Often as I’m going through my configuration, they ask what the best practices are for setting up NetFlow. What are the basic fields needed to make NetFlow … [Read more...] about NetFlow Configuration Guide: Best Practices
Ixia IPFIX Reporting and Analysis
Recently, we decided to deploy an Ixia CloudLens instance in our lab to see what we could report on using Ixia’s IPFIX. Once I had Ixia running and sending flows to a lab environment, I was blown away by the level of reporting. … [Read more...] about Ixia IPFIX Reporting and Analysis
NetFlow Cloud Monitoring with Scrutinizer
When it comes to cloud watching, you’re probably thinking that means laying outside in the sun watching clouds float by. That is a form of cloud watching, yes; however, the type of cloud watching I’ll be talking about today is monitoring your network clouds … [Read more...] about NetFlow Cloud Monitoring with Scrutinizer
Uncovering SSL Vulnerabilities with Gigamon Metadata Exports
While we have supported Gigamon reports for a couple of years, we now leverage the SSL information pulled from Gigamon flows. This enables you to run a series of reports that provide context-rich SSL information. … [Read more...] about Uncovering SSL Vulnerabilities with Gigamon Metadata Exports
FireSIGHT Integration – Updated 2017
Since I wrote my last blog on FireSIGHT integration, a lot has changed with Scrutinizer. We have a new WebUI, new reports, and our FireSIGHT integration now works differently. This, of course, means that the way we set up the integration is a bit different as … [Read more...] about FireSIGHT Integration – Updated 2017
Configuring a Cisco Catalyst 4510 Switch IOS XE 3.6
Recently I was visiting a customer on site when they mentioned they felt like they were not getting accurate information from their Cisco Catalyst 4510. Upon investigation, their flow record, monitor, and exporter all looked correct. Puzzled, my colleague and … [Read more...] about Configuring a Cisco Catalyst 4510 Switch IOS XE 3.6
Remote Access Trojan Uses DNS to Execute Powershell Commands
Eek! A rat! No, I don’t mean the cute, little rodent with the long tail; I mean the Remote Access Trojan. Trust me, I would much rather have the rodent near my computer than this Trojan. What does a RAT do, though? Exactly what the name suggests—it uses remote … [Read more...] about Remote Access Trojan Uses DNS to Execute Powershell Commands
Social Media