This information is intended for anyone who wants to install, configure, or maintain External Data Feeder for NFO (EDFN). The information is written for experienced Linux or Windows system administrators who are familiar with virtual machine technology and datacenter operations.
If you are going to take advantage of NFO NetFlow enrichment functionality, such as GeoIP locations, Cyber Security Threat Lists, or process AWS VPC Flow Logs – External Data Feeder for NFO must be installed on the server with Internet access.
Starting with release 2.7, NFO and EDFN are packaged together and installed on the same machine by default.
If NFO is installed on the server with no internet access, EDFN should be installed separately, and EDFN installed together with NFO should be disabled. In any case External Data Feeder for NFO is administered through NetFlow Optimizer GUI.
Please be sure to have the following before you begin the installation of the External Data Feeder for NFO software:
You have to login as root for Linux and administrator for Windows installations and updates
You have successfully installed NetFlow Optimizer and you know its IP address
NetFlow Logic distributes External Data Feeder for NFO as RPM or TAR.GZ for Linux, or as EXE for Windows.
You can install External Data Feeder for NFO on a platform with the following specifications.
Linux kernel 2.6+ on
Windows 2008 R2, 2012, 2012 R2, and 2018 (64-bit)
CPU, Memory, Disk Space
- CPU: Min 4 CPU cores - Memory: 2 GB - Disk Space: 2 GB
The following network ports must be allowed for outbound connections.
External Data Feeder for NFO Agents Internet communication
External Data Feeder for NFO Agents secure Internet communication
NetFlow Optimizer communication
The following Internet destinations must be allowed for outbound http-connections.
Geo locations monitor
Host reputation monitor
Threat Feeds addresses
Threat Feeds IP blocks
Additional Security Threats list