Scott, Author at Plixer

What visibility flow data offer

09.22.22 - Scott

Network and Security administrators have several monitoring protocols available to help provide network insight and security awareness. Today, I’d like to talk about why flow technologies like NetFlow should be top of mind in this discussion.

Security Operations

Network security: How effective is your security posture?

10.13.21 - Scott

Network security is described as the implementation of technologies, processes, and protocols designed to safeguard an organization’s communications and information.

Security Operations

Detect abnormal lateral network traffic using machine learning and NetFlow

09.03.21 - Scott

In a previous blog I introduced you to the malware detection capabilities of Plixer’s intelligence product. I would like to circle back to some information shared in that blog to talk about its ability to detect behaviors like lateral movement across the LAN segments of the network related to data accumulation.

Before I get started, I want to talk about strategies used for network visibility and why flow technologies should be at the top of the list.

Configuration

Cisco Firepower FTD NetFlow configuration

07.14.21 - Scott

I am often exposed to new network devices and the ways that they support and configure flow-monitoring technologies. So I was excited to learn this new Cisco Firepower Threat Defense NetFlow configuration.

This configuration uses all the same NSEL configuration commands that you would use on a Cisco ASA, in just about the same order as I described in this Cisco ASA configuration blog. The difference is that you are applying the commands using a GUI interface and not CLI.

Security Operations

Malware detection using machine learning and NetFlow

05.19.21 - Scott

Last year Plixer released version 19 of Scrutinizer, and with it came the introduction of Plixer Security Intelligence, our machine learning appliance.

The ML appliance learns and establishes what is normal in network traffic behaviors across hundreds of data models. When Scott’s PC reaches out to an application that he has never touched, or exhibits out-of-the-ordinary traffic behaviors, that activity is flagged and alarmed on.