Flow Based technology provides network visibility that reduces time and costs for understanding, alerting, and reporting on network issues. It gives real-time and historical insight into network traffic through non-intrusive collection of flow data from routers and switches. This flow-based network intelligence is useful for various teams and helps with tasks like capacity planning, security, and troubleshooting.

4. Flow-Based Network Intelligence you can depend on.

6. Network Auditing: Companies are challenged with maintaining too many tools that all show a slightly different view of the same data. Often with limited Visibility. Hence the need for a convergent toolkit. Capacity Planning Accounting Performance Root Cause Analysis Security Surveillance Lockdown QoS Business Intelligence Copyright 2009 IdeaData Pty Ltd

7. Copyright 2009 IdeaData Pty Ltd How does NetFlow work?

11. Flow-Based Network Intelligence you can depend on.

13. Alerts – Menus and Popups Alerts are easily seen or edited from the left menus and by clicking on the grid element you want to configure. Mouse over popup provide additional information. The “My Alerts” menu Filters the Alert information simply by clicking on its grid.

14. Standard Alerting vs Anomaly Detection

15. Anomaly Detection – Preset Monitored Traffic Items

16. Anomaly Detection – Intelligent Baseline Examples Measurement Profiles Flows / bps / Packets / Packet Size / Bytes / Counts Examples of Monitored Traffic Items 168 Intelligent Baseline Statistics are learned for each Monitored Traffic Item . (4 Statistical baselines for each of the 6 Measurement Profiles for each weekday).

18. Anomaly Detection – Primary Alert View

19. Anomaly Detection – Root Cause Analysis

20. Anomaly Detection – 3 clicks to an Intelligent Baseline Make your own rules (Steps 1 & 2) From Configuration menu choose interface, application, its protocol, location or QoS class etc …This is a useful starting point, once you have setup your criteria to begin learning a baseline you can edit it and tune the filter at anytime.

21. Anomaly Detection – 3 clicks to an Intelligent Baseline Make your own rules (Step 3)

22. Anomaly Detection – Case: Large P2P Traffic Following an Anomaly Alert we discover a large amount of P2P traffic, It’s a bittorrent and xbox traffic downloads outside of business hours. The IP Addresses and location tags indicate the department, Now that you know where its coming from it’s a simple process to build an access list and stop it dead in its tracks. As Netflow Auditor has a comprehensive scheduler and multiple output formats including csv, PDF and SNMP, this process can be fully automated

23. Standard Alerting – Case: Heavy Traffic Detection

27. Flow-Based Network Intelligence you can depend on.

34. Quickly find Servers such as P2P Servers Or track conversations

35. Quickly find Servers such as P2P Servers Or track conversations

36. Packet Size Distribution

37. IP Conversations Stacked. See Anomalies, Servers, P2P? Copyright 2009 IdeaData Pty Ltd

38. For specific Servers see all talkers and applications Copyright 2009 IdeaData Pty Ltd

39. Application Detail: Email and DNS Traffic Last 7 Days Copyright 2009 IdeaData Pty Ltd

40. Conversations for one Minute on a selected interface Copyright 2009 IdeaData Pty Ltd

41. Flow-Based Network Intelligence you can depend on.

42. Comparative Baselining Alert on the rising and falling threshold of every flow individually, grouped or filtered

43. Full Flow Compliance analysis for a selected interface Copyright 2009 IdeaData Pty Ltd

44. IP Bidirectional analysis Copyright 2009 IdeaData Pty Ltd

45. Right Click drilldown for a Time Period Copyright 2009 IdeaData Pty Ltd

46. Grid Options Copyright 2009 IdeaData Pty Ltd

47. Breakdown of usage by Location Copyright 2009 IdeaData Pty Ltd

48. Weekday Baseline. All SMTP Traffic for a location Copyright 2009 IdeaData Pty Ltd

49. Monitoring QoS. Long-Term Comparative Baseline Copyright 2009 IdeaData Pty Ltd

50. Route Analysis for last week Copyright 2009 IdeaData Pty Ltd

51. All http flows per minute received on an interface Copyright 2009 IdeaData Pty Ltd

52. Monitoring QoS: ToS Precedence Last 13 Hours Copyright 2009 IdeaData Pty Ltd

53. Application Bi-directional analysis on an interface Copyright 2009 IdeaData Pty Ltd

54. Packet Size Distribution analysis on a router/switch Copyright 2009 IdeaData Pty Ltd