FPS License and Deduplication Netflow of Steathwatch

[nuthaponbutsungnoen9037]

Hello guys

When Steathwatch receives duplicate Netflow, it has a De-duplicate feature for resolving.
I'd like to know that it will have doubled the cost of FPS licensing or not ?


Regards
Nuthapon

[Milos_Jovanovic · Accepted solution]

Hi @nuthaponbutsungnoen9037,

Yes, each flow will be counted normaly, regardless of duplicate flow. Stealthwatch will de-duplicate flows, in terms that it won't store same information multiple time, but it will count it still. If you collect same flow from multiple points, it will be counted each time. You need to optimize from where are you collecting data, in order to avoid this.

BR,

Milos