Without any additional hardware or flow export configurations, this simple add-on will now act as your new network Intrusion Detection System leveraging on the prevailing flow data collection mechanism. ASAM, built using the state-of-the-art ‘Continuous Stream Mining Engine’ technology, helps identify the threats in your network in real time and group the anomalies detected by problems and problem classes (Bad Src-Dst, DDoS, Suspect Flows, etc.) for ease of understanding.
ASAM, which is an Add-On to NetFlow Analyzer, can be brought into the product by applying a service pack and is also available as a full build. We assure you that ASAM will not affect the performance or the data of NetFlow Analyzer deployed in your network and ASAM can be disabled separately without affecting NetFlow Analyzer.
Prerequisites:
1. NetFlow Analyzer Professional / Plus edition running BUILD 7600. You can find the BUILD from ‘About’ link on top right corner of product GUI.
2. Can be used only with MySQL database. MSSQL support for ASAM will be available later.
3. Support for sFlow will be available later.
4. If you have applied ASA NetFlow patch, please contact us and we will provide a new patch to enable ASA NetFlow analysis by ASAM.
How do I get this add-on?
Please email to netflowanalyzer-support@manageengine.com to get this add-on as a service pack or for the full build.
Over the next few weeks, we will also outline the security issues identified by ASAM, how they can affect your network and what action you can take.
Looking forward to hearing your feedback on ASAM.
Regards,
Don Thomas Jacob
Dear Support
I want to try ASAM Add-On, currently I have Netflow Essential License 250 interface,
Colud you send me installation procedure and source.
Warm Regards,
Suparman