Featured Posts

An alert touches multiple segments of the network, representing the challenge to reduce false positives
Deep Network Observability

How to Reduce False Positives with Shared Context

False positives are rarely caused by too many alerts, but by missing context. Let’s say a spike in outbound traffic shows up in the firewall logs. Around the same time, ...

Read More
Magnifying glass on top of a diagram that looks like both a fingerprint and a network, representing end-to-end network troubleshooting
Network Operations

Why Most Performance Investigations Start in the Wrong Place

A padlock silhouetted against a dark background, surrounded by a spray of white particles, representing password spraying detection.
Security Operations

What Password Spraying Looks Like in Raw Network Telemetry

All Posts

Isometric smart industrial factory, including automated production lines and engineer workers
Network Security

From Reactive to Proactive: Improving Manufacturing Network Operations 

Manufacturing environments present unique challenges for network and security operations teams. Unlike traditional office networks, industrial networks must support

Read More
Security Operations

Cisco ASA Internet Threat Defense Solution Webcast

In our February 14th webcast, we will present how the Cisco ASA NSEL exports are used to detect network

Read More
Network Operations

Cisco ASA v8.4(5) Advanced Reporting Webcast

The latest software update to the Cisco ASA v8.4(5) dramatically changed the way vendors report on NetFlow and NetFlow

Read More
Network Operations

Cisco ASA NAT Reports using NSEL : NAT Session Logging

Recently we created a bunch of new NetFlow reports for the exports and a solution for NAT Session Logging

Read More