cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1372
Views
0
Helpful
1
Replies

FPS License and Deduplication Netflow of Steathwatch

Hello guys

When Steathwatch receives duplicate Netflow, it has a De-duplicate feature for resolving.
I'd like to know that it will have doubled the cost of FPS licensing or not ?


Regards
Nuthapon

1 Accepted Solution

Accepted Solutions

Milos_Jovanovic
VIP Engager VIP Engager
VIP Engager

Hi @nuthaponbutsungnoen9037,

Yes, each flow will be counted normaly, regardless of duplicate flow. Stealthwatch will de-duplicate flows, in terms that it won't store same information multiple time, but it will count it still. If you collect same flow from multiple points, it will be counted each time. You need to optimize from where are you collecting data, in order to avoid this.

BR,

Milos

View solution in original post

1 Reply 1

Milos_Jovanovic
VIP Engager VIP Engager
VIP Engager

Hi @nuthaponbutsungnoen9037,

Yes, each flow will be counted normaly, regardless of duplicate flow. Stealthwatch will de-duplicate flows, in terms that it won't store same information multiple time, but it will count it still. If you collect same flow from multiple points, it will be counted each time. You need to optimize from where are you collecting data, in order to avoid this.

BR,

Milos

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers