NetFlow Optimizer

Agentless

Deployment Installing yet another agent on a large network to provide comprehensive network traffic information is costly, difficult to roll out and manage. NetFlow Optimizer was designed to avoid those issues. A single instance of NFO, deployed in a data center, is capable of processing and analyzing massive volumes of network metadata. Select and configure your flow-reporting network devices to send NetFlow/sFlow/J-Flow/IPFIX to NetFlow Optimizer.

Configuration

NetFlow Optimizer is available as Windows or Linux installers, or as a Virtual Appliance. When installed, NFO is automatically configured to listen to flow data on UDP port 9995. You can change this port and/or add additional ports to receive flows from your flow information generating network devices. You also need to configure NetFlow Optimizer output to report traffic anomalies. Specify the IP address and port of your system (e.g. SIEM) which will receive detected DDoS attack messages and supporting information. Please refer to NetFlow Optimizer Installation and Administration Guide for additional details.