The few debates that have emerged over NetFlow Vs. sFlow often highlight why one technology is better than the other. In this post, I would like to emphasize where the technologies are similar as well as where they should be implemented (i.e. one over the other). Certainly both have some merits but, one technology is definitely outpacing the other. Read more
Blog
NetFlow Overview: What is a NetFlow Template Flowset?
In Part 3 of the NetFlow Overview series, I will be discussing the NetFlow Template Flowset. In Part 1 I covered NetFlow basics, and then Scott addressed NetFlow Packet headers in Part 2 of this series.
The following definitions are taken from Cisco’s NetFlow Version 9 Flow-Record Format whitepaper.
Internet Threat Defense Solution: Part 2
The Magnitude of the Cyber Threat Problem
Earlier this year, CNN stated that 39 Billion was stolen on-line in 2011. This Fall, Symantec calculated that the total cost of cyber crime in 2012 will reach 110 Billion. As Dmitri pointed out, every company has been compromised in some way. Advanced Persistent Threats are expected to continue increasing as shown below.
Cisco 6509 NetFlow Problems
Cisco 6509 NetFlow problems and recent improvements will be the main focus in this blog. Since the reporting accuracy of your NetFlow or Flexible NetFlow Analyzer could also depend on the quality of the exported data, hopefully discussing some of the major NetFlow problems with 6500 series will help us better understand how exactly reporting on these switches works. I will also take this opportunity to highlight improvements made in the sup 2T. Read more
Cisco ASA Internet Threat Defense Solution Webcast
In our February 14th webcast, we will present how the Cisco ASA NSEL exports are used to detect network threats that could be missed by the Cisco ASA threat detection logic. We’ll explain how to improve cyber security layers.
Attendees on the webcast will learn: