cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1846
Views
0
Helpful
5
Replies

I want to start collecting netflow

philipc011
Level 1
Level 1

So I have a few devices and I think it would be beneficial to start collecting net flow and getting some reports on it. I have an ASA and a cisco WLC, and just looking for some advice on some solutions that are out there.

5 Replies 5

ramkris2
Cisco Employee
Cisco Employee

If you have Prime Infrastructure (PI) as the Management application, you would need an Assurance license to be able to collect netflow data from devices. There are several dashlets/reports which would provide the data collected through monitoring in Netflow.

What about something like solarwinds, landcope, and scutinizer?

Solarwinds has NetFlow Traffic analyzer but it installs on on top of SolarWinds NPM which is a complete network monitoring tool. Both are quite handy and have extensive features and an awesome report writer that extends the functionality with custom reports.

http://www.solarwinds.com/network-performance-monitor.aspx

http://www.solarwinds.com/netflow-traffic-analyzer.aspx

If you need stand alone NetFlow analysis, Plixer Scrutinizer is a good option

Lancope is more of a NetFlow based security analysis tool - a good one but expensive too and useful when your priority is network security or network behavior anomaly detection.

Thanks,

Don

Disclaimer: I work for SolarWinds

 

Regards, Don Thomas Jacob http://www.solarwinds.com/netflow-traffic-analyzer.aspx Head Geek @ SolarWinds NOTE: Please rate and close questions if you found any of the answers helpful.

Marvin Rhoads
Hall of Fame
Hall of Fame

PI does not support Netflow from ASAs. It does from WLCs (as well as AVC data from them). If you already have PI, adding Assurance licenses is a logical step.

Solarwinds Netflow Traffic Analyzer (NTA) does a very nice job but their licensing model makes you buy as many Netflow licenses as you have with NPM - even though you typically have only a few Netflow sources. PI Assurance licenses can be sized to fit Netflow sources independent of the number of Lifecycle licenses. Also, as of NTA 4.0 the data store needs to be on a different server.

Lancope is very nice (and "reassuringly expensive").

I've heard some people speak highly of Scrutinizer but haven't used it personally.

Hi Phil,

Some features you may want to consider on the best netflow analyzer web page.

Mike