Featured Posts

Radar scans a digital network, representing flow-based threat hunting
Security Operations

How Flow Data Supports Threat Hunting Without Drowning Analysts

Threat hunting should feel deliberate. You should be able to follow a path, validate a suspicion, and document what happened without jumping across five consoles. Yet in many ...

Read More
A magnifying glass uncovers an alert midway along a progress bar, representing network baselining and troubleshooting
Deep Network Observability

Proving Nothing Changed: The Most Overlooked Troubleshooting Skill

Security padlock and connecting lines in a digital environment, representing firewall change validation
Network Security

What Changed After the Firewall Update? Let the Traffic Answer

All Posts

Network Operations

Cisco Zone-Based Firewall Reporting

Today, I will be talking about the Cisco Zone-Based Firewall, including their differences and advantages compared to a Cisco

Read More
Netflow

Find Pokemon GO Network Traffic with NetFlow

Monitor Pokemon Go Network Traffic So there I am monitoring my network with NetFlow and a wild application appears!

Read More
Configuration

Configure Cisco ISE NetFlow

EDIT 5/30/18: There is a newer version of this article available. In order to configure Cisco ISE NetFlow, we’re

Read More
Flexible NetFlow

Cisco NGA Configuration Guide

Last week I was working with a customer who needed help with a Cisco NGA Configuration (NetFlow Generation Appliance). 

Read More
Configuration

Cisco UCS NetFlow Support

Cisco UCS Netflow Support was recently added with the release of version 2.2(2c).  NetFlow exports can be configured either

Read More
General

Cisco Zone-Based Firewall Logging Support

We recently upgraded a few of our Cisco IOS routers to version 15.4(2)T and enabled zone-based firewall logging, which

Read More
Network Operations

Calculating NetFlow Volume

Often these days, we’re asked for a general rule of thumb or guidelines that can help with calculating NetFlow

Read More
Network Operations

Cisco 7600 NetFlow Problems

The cutting edge Cisco 7600 Series is an edge router that delivers robust, high performance IP/MPLS features for service

Read More
Network Operations

PfSense NetFlow Export

Today I will show you how to configure PfSense NetFlow export on one of the more popular open source

Read More
Network Operations

NetFlow Observation Point: octetDeltaCount

Let’s talk about NetFlow observation point in Cisco NetFlow capable devices, particularly the octetDeltaCount collection. Ingress and egress Netflow

Read More