Are we properly utilizing these expensive WAN links? That is probably a question you have asked yourself on more than one occasion when you get a bill from your provider. While MPLS/Broadband connectivity both have pros and cons, wouldn’t it be great if you had a tool to see if they were properly being utilized or if load is increasing over time? How about rather than just seeing in/out bits/s, you could determine what application is consuming the link? Stay tuned and see how it works!

Why is network capacity planning important?

Proper network capacity planning will ensure that your company is using your network more efficiently and not wasting money on bandwidth that isn’t needed. One of the largest benefits of collecting NetFlow/IPFIX is that you can trend this data for multiple years while retaining conversation granularity, allowing you to pinpoint exactly what application is causing the sudden increase in bandwidth utilization.

Applications and Network Capacity

This report is showing an ISP link of ours starting at the beginning of the year. As you can see from the table, quite a few of these apps are business-critical, but some are less so. We can see that most of our traffic appears to be SSL, YouTube and ISAKMP traffic. We also see a decent amount of Facebook traffic, which over time costs our WAN a lot of bandwidth. Using this information, we can either track down problem users/servers and fix the issues or judge whether to allow these apps. Now that we have a report built, we can easily create a threshold or schedule this report to be sent to our inbox monthly.

Integration with existing tools

Now that we have seen the benefit of monitoring ISP links and looking at application usage, what else can we do? We can integrate our NetFlow and metadata collector with other tools to add more context to the data we collect. It’s advantageous to use best-of-breed solutions that allow you to view their data together in a single pane of glass, lowering MTTK (Mean Time To Know).

For example, an Infoblox IPAM integration, SolarWinds, or even a CSV export will allow the addition of logical IP group to your reports so you can pinpoint issues down to specific groups on the network. Since many tools are coming with APIs, it makes it very easy for to use your investments to supplement network capacity data.

Trending network utilization

Trending network utilization

Since not every network has the ability to upgrade links whenever there is a slowness problem, capacity planning reports can be easy to collect to make sure your trends are within scope of your infrastructure. If your team is in need of some granular reports on your WAN utilization, feel free to reach out to our team to see how we can help!

Jake

Jake Bergeron is currently one of Plixer's Sr. Solutions Engineers - He is currently responsible for providing customers with onsite training and configurations to make sure that Scrutinizer is setup to their need. Previously he was responsible for teaching Plixer's Advanced NetFlow Training / Malware Response Training. When he's not learning more about NetFlow and Malware detection he also enjoys Fishing and Hiking.

Related