09-27-2021 11:00 AM
Hello guys
When Steathwatch receives duplicate Netflow, it has a De-duplicate feature for resolving.
I'd like to know that it will have doubled the cost of FPS licensing or not ?
Regards
Nuthapon
Solved! Go to Solution.
09-28-2021 03:59 AM
Yes, each flow will be counted normaly, regardless of duplicate flow. Stealthwatch will de-duplicate flows, in terms that it won't store same information multiple time, but it will count it still. If you collect same flow from multiple points, it will be counted each time. You need to optimize from where are you collecting data, in order to avoid this.
BR,
Milos
09-28-2021 03:59 AM
Yes, each flow will be counted normaly, regardless of duplicate flow. Stealthwatch will de-duplicate flows, in terms that it won't store same information multiple time, but it will count it still. If you collect same flow from multiple points, it will be counted each time. You need to optimize from where are you collecting data, in order to avoid this.
BR,
Milos
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide