Category: NetFlow NetFlow RSS Feed

Insider Threat Protection with NetFlow

Despite the fact that external attacks often get more attention in the media, recent data is proving that the threat posed by malicious, negligent or compromised insiders is indeed very real. The best way to detect and prevent insider threats is to have in-depth visibility into the internal environment and a means of filtering and prioritizing the massive amount of data available on the network into concise, actionable intelligence. READ MORE

Why Duplicate Flows Are A Good Thing

Many people ask about the “problem” of duplicate flows. They are coming from the point of view that duplicate flows are not efficient, are redundant and are a drain on resources; and therefore we should eliminate them. Duplicate flows are inherent in a NetFlow collection strategy, and I would argue that they are a good thing. Here’s why…. READ MORE

NetFlow Training Courses in May

Lancope's University of NetFlow will host four training courses in May in Boston, Montreal, Minneapolis and Chicago. Attendees will learn how to harness the power of NetFlow for dramatically improved network security and risk posture. READ MORE

Lancope’s Analysis of the Verizon 2013 Data Breach Report

Verizon has recently published the 2013 edition of its highly regarded Data Breach Investigations Report. Including analysis of more than 47,000 reported security incidents and 621 confirmed data breaches, the report reveals some very telling statistics and trends involving cyber security. Most importantly, it points to the fact that incident response and network surveillance need to be playing a much bigger role in organizations’ overall security strategies. READ MORE

StealthWatch Is Not a Four-Letter Word

Understanding the common complications with SIEM can not only help you better utilize your SIEM, but also know how to augment the data it provides (or in some cases, doesn’t provide). Flow collection bridges the gap between packet capture and SIEMs. Collecting NetFlow can provide a complete repository of host-to-host communication down to the leaf nodes on your network, and this level of visibility is critical for making sense of today’s complex threats. READ MORE