Documentation Center
AlienVault® USM Appliance™

NetFlow Monitoring

Applies to Product: USM Appliance™ AlienVault OSSIM®

NetFlow is an industry-standard protocol designed by Cisco Systems that lets you capture information about network flows (communication between hosts using TCP/IP). USM Appliance Sensors can generate NetFlow information from traffic received on mirrored ports, or network devices can send NetFlow information directly to the USM Appliance Server.

USM Appliance customers can use NetFlow collection as a part of behavior monitoring they want to perform. For example, NetFlow collection can assist users in identifying insecure services, and protocols and ports that should not be used. It can also assist in identifying traffic sources and destinations to help ensure that inbound internet traffic is limited to IP addresses residing within the DMZ.