NetFlow Optimizer enables you to process massive volumes of NetFlow (IPFIX, sFlow, Cloud VPC Flow Logs, etc) data, optimizing and enriching it in real time - ensuring that you get data where you need it in right formats.

NetFlow Data Volume Reduction

  • Consolidation without loosing accuracy: flows from communicating peers are aggregated over short configurable period of time by source, destination, protocol, ports

  • Deduplication: report only once, if the same flow is reported by several network devices

  • Top traffic: configure Top N to significantly reduce volume keeping 99% accuracy

NetFlow Data Enrichment

Add information not available in NetFlow records

  • DNS names, VM names

  • Cloud instance names, services, regions

  • SNMP polling data

  • GeoIP

  • Reputation based on threat lists

NetFlow Stitching

  • Combine flow records for client-server conversations

  • Report network conversation state (Begin, Continuing, End) and session time