Featured Posts

Various network nodes with security locks, representing encrypted traffic visibility
Network Security

How To Investigate Encrypted Traffic Without Decrypting It 

Most malicious traffic is encrypted, and in real environments, you usually don’t have the keys to inspect it. You can still investigate encrypted traffic effectively by ...

Read More
Representation of lateral movement: attack spreads through a network from a central point
Network Security

How To Detect Lateral Movement: A Step-by-Step Guide 

Blocks of data in a digital environment. Most of the blocks are clear but one is red, representing AI-powered anomaly detection
NDR

How Network Anomaly Detection Works (And Why It Matters)

All Posts

bobn
Network Operations

5 Prevalent SIEM Problems and How NetFlow Collector Integration Solves Them

Security Information Event Management (SIEM) platforms began to gain mainstream attention and adoption around 2008. SIEM promised to simplify

Read More
Network Operations

Linux NetFlow Collector

So you are thinking of delving into the world of Linux NetFlow Collectors, but do not quite know where

Read More
General

Juniper MX240 IPFIX Support | Direction Problems

The other day I was helping an engineer who was trying to provide some Juniper MX240 IPFIX support when

Read More
Netflow

SIEM NetFlow Support: Don’t Sell Yourself Short

This is a conversation I find myself having more and more lately so I thought it would make sense

Read More
Network Operations

NetFlow Collector: System Requirements

System requirements for a NetFlow collector are a lot higher than the average program. While I am still the

Read More
Network Operations

Cisco NetFlow Collector: NetFlow Monitoring

Are you in need of a Cisco NetFlow collector for network traffic analysis? Do you have an overwhelming amount

Read More
Netflow

NetFlow from a Checkpoint Firewall

I wonder how many firewalls (IP Security Appliances) have been sold to date.  Since we have been in business,

Read More