Most of the requests and feedback that we have had in the last 6 to 9 months have been in the area of application visibility. We realized that application categorization based on just port and protocol was quite insufficient.
NetFlow Analyzer 5.5 Early Access provides a couple of new capabilities in this area:
1. We now have the capability to collect and report on Cisco NBAR data. Cisco NBAR does a deep packet inspection and aids in more intelligent application classification to recognize a host of application, including P2P and web applications, some of which use dynamic ports. Whats more? We also have the provision to configure NBAR data export on your routing devices from the NFA user interface.
2. Based on NetFlow data, you can now classify applications not just based on port and protocol – but also based on IP address / subnet. You can now create your own custom application (from the Application Mapping link) as – IP address 10.10.10.10 with port 80 TCP to be mapped to application custom1.
This is available for a free 30 day evaluation at
http://manageengine.adventnet.com/products/netflow/ea/download.html
Try it and let us know if you have any suggestions or feedback….. or more feature requests 😉
Thanks
Raghu
