Connect to streams of traffic summary data

• Check for flow sources already advertising traffic statistics on your network.
• Configure sources not already advertising (assumes SNMP configuration support at the device).
• Configure manually (by using the command line interface at the device/router).

See application/protocol usage for designated ports, well-known ports or Type of Service (ToS) identifier

• Classify traffic by port number (and tag by network/subnet where observed)
• Add custom application/protocol display names for meaningful Type of Service reports.

See/troubleshoot application/protocols with deep packet inspection (NBAR protocol discovery)

• From router (Best practice). Get NBAR (Network Based Application Recognition) from Flexible NetFlow - View NBAR Application Flow Details report.
• From a network interface. Gather NBAR statistics from any network interface using SNMP - View the NBAR Application - Interface Totals report.

Understand which categories of traffic on your network get priority

• Get Class-based Quality of Service (CBQoS) observations
• Customize Type of Service (ToS) service labels.

Bundle network addresses into groups for business function, reporting, and analysis

Create an IP address group (Also useful for tagging private IP addresses with geocoordinates or location)

Get alerts, decision support, and notifications when bad or unexpected things happen

• Set thresholds for bandwidth utilization, failed connections, top sender/receiver and more.
• Get notifications, create notification escalation schedules, and more.

Get alerts, decision support, and notifications when clients or end stations try to hide their identity

• Add a list or list source to the IP Reputation Library.
• Set a Threshold/Alert for suspicious address detection.
• View, share, and report on suspicious connections.

Filter, search, and browse forensic/historic data

Use reports, logs, dashboards and NTA Advanced Filtering.