Being a niche player in the SAAS market, Zoho brings an amazing level of engineering expertise to ManageEngine in building highly secure and scalable distributed applications. And hopefully you know, Adventnet has recently changed its name to Zoho Corp and formed three divisions namely ManageEngine, Zoho, and WebNMS.

Many of the NetFlow Analyzers available in the market are not truely distributed in nature. They parse and store the flow records in the same collector and cannot give you the unified view of all the collection points. And there is no automatic crash recovery of data is possible. Unlike in ManageEngine, it involves individual backup and upgrade procedures which requires lot of maintenance activities. All these procedures are automated in ManageEngine NetFlow Analyzer Enterprise Engine via failover and smart upgrade manager technologies. And this is why we call ManageEngine NetFlow Analyzer is a Enterprise class distributed NetFlow collection and reporting engine suitable for any large organisations. And when we say distributed we mean it.

Before you start evaluating a distributed and scalable netflow monitoring solution, please ensure that you have the following Enterprise class features are available.

1. Distributed flow collection capability and optimized bandwidth usage between collectors and central reporting server.

2. Scales upto 20000 interface with 15000 flows per second. Any number of collectors can be added without any additional license.

3. Support for NetFlow V5,V7,V9 /sFlow, JFlow, NetStream, IPFIX.

4. Support for Cisco NBAR and correlate NBAR data with NetFlow data.

5. Support for CB-QoS (Class Based - Quality of Service) monitoring. Identify Pre and Post policy metrics and fine tune your QoS configurations.

6. Failover support - automatic crash recovery and data replication. Please visit this link for more information.

7. Ability to use your existing SAN (Storage Area Network).

8. Compatible with VM ware.

9. No data loss even after a link failure between Collectors and Central Server.

10. Ensure separate 64 bit binaries are available for increased flow handling and reporting performance.

11. Secure data transfer - https mode between collector and central server

12. Smart upgrade manager. Upgrade patchs are pushed automatically from the central console to collectors. 

12. User defined dashboards and views.

13. Group devices based on their location and build tree view for easy access and troubleshooting.

14. Ability to work in multiple time zones

15. Network Forensics using raw data

Sample screen shot from ManageEngine NetFlow Analyzer Enterprise Edition:

 And remember thousands of users like Cisco,Adobe, Ferrari and many fortune companies cannot be wrong.

 Please download and try our 30 day full featured trial edition in the following link

http://www.manageengine.com/products/netflow/distributed-monitoring/download.html

Full Feature List is available in the following link

http://www.manageengine.com/products/netflow/distributed-monitoring/new-features.html?temp

  Kindly write your questions to netflowanalyzer-eesupport@manageengine.com. We are happy to assist you at any moment. 

Thanks

Raj

Couple of day’s back one of our customer wants to know the best practice to monitor the VOIP/IP Phone traffic using NetFlow Analyzer. I felt this deserves a blog really.

By default NetFlow Analyzer identifies SKINNY & SIP (port numbers 2000 & 5060) applications and show the usage with the IP address or phone involved on each and every interface. But to monitor the voice traffic as a separate entity or for a specific phone, you have two ways. Either by using the application mapping using voice gateway IP or individual IP network/range of phones with IP group.

Let’s see the options in detail.

1.    Application mapping using voice gateway IP

    ManageEngine NetFlow Analyzer detects applications based on the port and protocol values available in the flow records. And it is possible to add, modify and delete the port - protocol mappings from the user interface. As an added advantage NetFlow Analyzer also provides an ability to associate the IP addresses into this application mapping for precise classification. So if you create an application mapping "MyAPP" with an IP address - port - protocol match, NetFlow Analyzer starts classifying the all conversations/calls originated or designated to the mapped IP address with the defined port & protocol as “MyApp”.

Using this functionality one can create a new application mapping using the "Application Mapping" link with the voice gateway IP and port & protocol used for IP phone traffic. If you are not sure about the port and protocol, you can also use 0-65535 as a port range in the application mapping. Since this is going to be your voice gateway, mostly it deals with VOIP traffic.
  This new VOIP tracking application will be shown under the application tab with the respective traffic volume and further drills down to conversation/call information.

2. Using IP groups

    As a second option, it is also possible to monitor the IP phone traffic by creating an IP group. The IP groups feature lets you monitor departmental, intranet or application specific traffic exclusively. You can create IP groups based on IP addresses and/or a combination of port and protocol. You can even choose to monitor traffic from specific interfaces across different routers. After creating an IP group, you can view the top applications, top protocols, top hosts, and top conversations in this IP group alone.

Now create an IP group with a VOIP gateway or VOIP IP network or VOIP phone range. You can create as many IP groups based on your requirement. The possibility of associating the port, protocol and interface information with IP groups helps to make the classification to be more precise.
Each IP group gives you the complete traffic, application and conversation information pertained to the IP addresses or port-protocol mapping involved in the group.

Note: In both the options, ensure that the desired IP address (voice gateway IP or IP address of IP phone(s)) is visible to your router or L3 switch. So that it can be exported through the NetFlow packet.

Please write your questions to support@netflowanalyzer.com. You can download our 30 days all feature trial software from the following link.

Download:

http://www.manageengine.com/products/netflow/download.html?ab

Features:

http://www.manageengine.com/products/netflow/netflow-features.html

Live Demo:

http://demo.netflowanalyzer.com

Thanks
Raj