ExtraHop NetFlow Sensor
Easily extend flow-based security and performance
monitoring and analysis across your network
Gain Comprehensive Visibility
Across Your Organization
Sometimes it isn't practical or necessary to put full-packet analytics at every remote site, but you still want to monitor network status and application performance, so having zero visibility isn't an option.
The ExtraHop NetFlow sensor provides expanded surface visibility, leveraging network traffic analysis for both security and network performance monitoring workflows. Extend NetFlow data to both network performance and security use cases and bring all of the findings into a single unified platform, Reveal(x). NetFlow data can then be used to quickly troubleshoot performance issues and to identify potential malicious behavior including data exfiltration.
This dedicated virtual sensor easily collects data from Cisco NetFlow 5, 9, and IPFIX providing intuitive and customizable dashboards and visualizations to track patterns and make informed decisions.
EXTEND VISIBILITY AND DETECTION COVERAGE
-
Increased visibility into areas of the network to close gaps and reduce blind spots left by packet capture.
-
Flexibility to add NetFlow sensors across the network and fire detections on discovered devices.
-
Combine NetFlow metrics with wire data, for contextual network information.
TROUBLESHOOT PERFORMANCE ISSUES
-
Gain Insights into how well applications and services perform on the network.
-
Access critical information about network users and applications “Top Talkers”, peak usage times, and traffic routing.
-
Configure dashboards, set up triggers, workflows, and create alerts on metrics.
IMPLEMENT EFFICIENT NETWORK PLANNING
-
Track and anticipate network growth plan upgrades.
-
Justify an increase the number of ports, routing devices, or higher-bandwidth interfaces needed to meet growing demand.
-
Easy to deploy virtual NetFlow sensors to monitor remote areas of the network and eliminate gaps.
-
Consolidated console for easy management of both wire data and flow metrics.
USE CASES
PERFORMANCE
Top Talkers
Application Mapping
Policy Management
SECURITY
Data Exfiltration
DDoS Attack Detection
C2 Attack Detection
The real value in ExtraHop Reveal(x) is the time we see returned to our engineers so they can focus on the things that matter, like projects, strategic initiatives, and — most importantly — innovation.
DIANNE BROWN
CISO, ULTA BEAUTY
