Category: StealthWatch

VMware Cloud Infrastructure and StealthWatch FlowSensor

In July of this year VMware announced it's new vSphere 5 and Comprehensive Cloud Infrastructure Suite. For many businesses this release begins to improve performance of the virtualized environment to the point where even the most resource-intensive applications can be moved into the cloud. A few days after the primary product announcement VMware announced that “as part of the Network Monitoring and Troubleshooting features, vSphere 5 provides NetFlow and Port Mirroring capabilities”. vSphere 5.0 will provide native support for NetFlow v5. Netflow v5 is available on many routers from different brands, but is restricted to IPv4 flows. In contrast Netflow… READ MORE

Measuring NetFlow Scalability: How Much is a Lot of Flows?

In the world of enterprise-class NetFlow collection, the key scalability factor is flows per second (fps). Flows per second is a measurement of how many NetFlow records the collector is receiving on a second by second basis. As a quick refresher, NetFlow is an IP accounting technology developed by Cisco in the late 90s. It's been refined and improved over the years and has become an integral part of network and security monitoring, especially in large distributed networks such as that found in the enterprise. Every time a packet travels through a NetFlow-capable device a flow is created in the… READ MORE

StealthWatch 6.1 – Now with ASA Flows

While I was attending Cisco Live a few weeks back I had more than a few people come up to the booth skeptical of what we meant when we said StealthWatch added support for the flow records from the ASA. I'm happy to say the people I spoke with had very positive comments about the way StealthWatch consumes this flow feed. A number of them asked why everyone didn't process the records the way we did. The issue is that while the ASA outputs statistics using a NetFlow export, the data contained within it wasn’t quite the same as a… READ MORE

Lancope Unveils High-Speed StealthWatch FlowCollector 4000

As one of the fastest flow collectors on the market, the FC 4000 is massively scalable and features extensible storage capabilities ATLANTA and LAS VEGAS (Cisco Live conference), July 12, 2011 – Lancope, Inc., a leader in flow-based security, network and application performance monitoring, has unveiled the StealthWatch® FlowCollector 4000, one of the fastest flow collectors on the market. Highly scalable to meet the needs of any enterprise, the FlowCollector (FC) 4000 increases the maximum monitoring capacity of the StealthWatch System to 3 million flows per second (fps), significantly boosting network visibility, performance and security. "The use of flow data within… READ MORE

Lancope Extends NetFlow-Based Behavioral Analytics to the Perimeter for Greater Contextual Awareness

Extension of internal monitoring capabilities to the perimeter dramatically improves network visibility, performance and security ATLANTA and LAS VEGAS (Cisco Live conference), July 11, 2011 – Lancope, Inc., a leader in flow-based security, network and application performance monitoring, has announced that it will now combine internal and perimeter-based network monitoring for greater contextual awareness. By integrating NetFlow analysis from the internal network with key data from perimeter devices such as firewalls, Lancope will enable customers to achieve dramatically improved visibility, performance and security. Through its new capabilities, Lancope’s StealthWatch® System will now assign Concern Index™ points to IP addresses that… READ MORE