TECHNICAL DATA

Flow

ENA’s Integrated Flow Analyzer Premium (IFAP) gives you detailed flow information about your network traffic, so you can deliver continuous availability for critical applications.

Understand your
network traffic

ENA helps you complete your network visibility and show who’s talking to whom, for how long, at what intervals, using which protocols and ports, and how much data is exchanged. With a top-down flow perspective that can easily scale to any network size, our flow monitoring helps you reduce MTTR and MTRS across your customers’ networks and your own.

Plan for future growth with insight into the interfaces that see the most and least traffic. Through our flexible and customizable dashboard-centric UI, ENA presents both element- and flow-based perspectives in context to one another.

Integrated Flow
Analyzer Premium

ENA brings all together all aspects of flow management – information on network congestion, applications consuming high bandwidth percentages, destination of network traffic – as part of your wider enterprise network management, monitoring and analytics software.

Simple management

ENA puts all flow analysis in one place. Flow collection is consolidated into a simple process – collect flow from a local collector, and manage collection from remote servers.

Identify top talkers

Real-time visibility into top conversations, so you can identify hosts with suspiciously high numbers of active conversations.

Extensive historical reports

Detailed reports down to a granularity of one minute, displaying up to a month of historical data. Export reports as HTML, PDF, XML, CSV and other formats.

Powerful, intuitive UI

Enable and disable flow collection from dashlets and context menus, wherever you are in the network.

Unlimited flow scalability

ENA supports distributed pollers for unlimited NetFlow scalability. Deploy additional servers to handle flow accommodation where large volumes are needed or traffic must be localized.

Custom data analysis

View flow data in the way that best suits you, with combinations of eleven breakdowns: conversations, interfaces, applications, ports, hosts, listeners, talkers, protocols, QoS classes, DSCP classes, IP precedence classes.

Flexible grouping controls

Group multiple hosts, web servers and users into a single chart with an aggregation of data.

Adjustable data retention

Store years of rolled-up data, dependent only on memory size.

Provide bandwidth
for critical applications

Observe traffic patterns over time in increments as precise as 1 minute so you can see exactly which traffic classes and protocols are suffering from bandwidth starvation. Keep an eye on which end users are causing bottlenecks or which traffic types are most resource-hungry and likely to contribute to network congestion, so that you can act appropriately to keep crucial business services up. Look to the future with confidence by determining bandwidth patterns to facilitate more accurate capacity planning.

Monitor traffic
between subnets and
cloud applications

As cloud computing grows, you have greater need to understand the cumulative effects of a mass of workstations in specific locations (e.g. offices, departments, subnets) that communicate with applications on public and private cloud. IFAP gives you immediate access to traffic patterns and historic trends for specific subsets of traffic, so you can see where the network is meeting availability and performance requirements.

Gauge network
impacts on
business services

Networks are increasingly distributed, with a huge number of endpoints. You need to know where your traffic is coming from, and where it’s going. Use flow monitoring to understand which business services are supported by which links in the network. Keeping tabs on where your traffic is allows you to prioritize allocation of resources for precise troubleshooting and proactive management.

Expansive networks are also more difficult to defend from outside attacks. IFAP can help you detect potential denial of service attacks by identifying abnormal network traffic behavior within your network. Networks are holistic systems – when one part faces an issue, there will be repercussions elsewhere. ENA allows you to easily keep an eye on how the network affects traffic flow and vice versa.

Dedicated dashboards
and dashlets to
monitor flow

Flow Data

The Flow Data dashlet displays flow data in chart and table form for the selected View, device, VM platform or port.

Flow-Enabled Devices

The Flow-Enabled Devices dashlet lists the devices or ports on the selected managed object that are enabled for flow. Use this dashlet to start or stop flow collection on a selected device.

Flow Summary

The Flow Summary dashlet displays a summary of flow data for the selected device. Use this dashlet to start or stop flow collection on the selected device.

Flow TopN Summary

The Flow TopN Summary dashlet displays topN information for flow-enabled devices.

Spot long-term
traffic trends

Understanding flow patterns is essential to spotting long term traffic trends and where capacity may quickly become depleted. Without it, you cannot make the decisions that will secure the long-term health and performance of their networks. Or you might find previously unknown or underutilized areas of the network, enabling you to alter existing connections and eliminate any unnecessary hardware costs. Store as much rolled up data as your hard drive capacity can hold and easily group it in ways that allow you to analyze and report on it from a variety of perspectives.

Flexible configuration

You have complete control over the collection of flow data, and we’ve consolidated flow configuration and management into a simple process that reflects the flexible and accessible nature of ENA. It’s easy to enable or disable flow collection through the Flow Inventory page, from specific flow dashlets, or the Context Menu of the selected device. Manage all network flow collection from the Flow Inventory page, providing you with a summary of all devices configured for flow and insight into the flow data on all ports for configured devices.

Assign as many flow collectors to Entuity servers as its license permits, and deploy additional servers to seamlessly handle large volumes of collection or when traffic must be localized geographically. Gain complete visibility of which flow collectors are assigned to which server or servers, and of the devices associated with each collector, all without administrative burden.

Manage application
port mappings

Identifying application data within flow data is integral to efficiently managing your network bandwidth. When a connection is made from a client to a server, the TCP or UDP port on the server end of the connection determines the application in use, and ENA identifies the application data by mapping the TCP and UDP port number to an application. In doing so, ENA can remove ephemeral port records from the database for greater efficiency.

Save on expenditure

Greater efficiency

Use ENA’s flow offering to identify the applications causing congestion, change user policy if needs be, and avoid unnecessary investment costs.

Find root causes

Determine what causes an increase in network flow – is it a particular region, or a new app? – and adjust user policy as appropriate.

Data-based planning

Use flow to provide accurate QoS settings, rather than basing them on theory.

Better budgeting

Discover the ownership and use costs of new apps with accurate bandwidth usage figures. Help split internal costs between teams and departments.

R

NetFlow v5, v6, v7, v9 (support for the most commonly used templates)

R

Sampled NetFlow v5, sampled NetFlow v9

R

NetFlow monitoring on Cisco ASAs

R

IPFIX (comparable support to that delivered for NetFlow v9)

R

Netstream v5, v9

R

sFlow v4, v5

R

JFlow

R

VMware distributed virtual switch flows (including support for NSX VXLAN tenant information where applicable)

R

OOTB support for Cisco, 3COM, Juniper, Huawei, Hewlett Packard, Brocade and more

Comprehensive flow protocol support

ENA supports a range of network flow protocols, giving you insight into all traffic across your network.

Complement Cisco
NBAR technology

As well as providing for flow-related technologies, ENA supports Cisco NBAR to help ensure the quality of application performance. Flow and NBAR are complementary technologies – whilst flow records all conversations passing through an interface and can tell you the source and destination of every conversation, NBAR enables you to categorize the traffic across an interface. Use flow to see how much traffic is flowing from one router to another, and then use NBAR to intelligently breakdown the traffic types into applications. Use flow and NBAR to find traffic spikes and precisely determine their cause.