Welcome to the NetFlow Auditor Blog

Rafi Sabel

Director of Engineering & Product Manager
Find me on:

Recent Posts

[Webinar] End Point Threat Detection with NetFlow Analytics

Posted by Rafi Sabel on Jan 18, 2017 11:06:00 AM

Join us on Thursday February 23rd at 2pm EST for our latest webinar on End Point Threat Detection with NetFlow Analytics.

New kinds of Ransomware attacks, Botnets, Crawlers, infiltrated IoT devices, Hackers and other nefarious agents are finding creative ways to cause denial of service and are high risk to all organizations and intellectual property.

We’ll dig deep into flow-based End-Point Threat Detection and take a look at how to find all the needles in all the haystacks and how to easily quantify, substantiate and isolate these risks by improving your visibility and mean time to detection, enhancing security and compliance and limiting loss.

Read More

Topics: Threat Detection

Benefits of a NetFlow Performance Deployment in Complex Environments

Posted by Rafi Sabel on Dec 13, 2016 10:10:07 AM


Since no two environments are identical and no network remains stagnant in Network Monitoring today, the only thing we can expect is the unexpected!

The network has become a living dynamic and complex environment that requires a flexible approach to monitor and analyze. Network and Security teams are under pressure to go beyond simple monitoring techniques to quickly identify the root causes of issues, de-risk hidden threats and to monitor network-connected things.

Read More

Topics: NetFlow

5 Ways Flow Based Network Monitoring Solutions Need to Scale

Posted by Rafi Sabel on Oct 31, 2016 6:24:38 PM

A common gripe for Network Engineers is that their current network monitoring solution doesn’t provide the depth of information needed to quickly ascertain the true cause of a network issue.

Many already have over-complicated their monitoring systems and methodologies by continuously extending their capabilities with a plethora of add-ons, or relying on disparate systems that often don’t interface very well with each other.

There is also an often mistaken belief that the network monitoring solutions that they have invested in will suddenly give them the depth they need to have the required visibility to manage complex networks.

Read More

Topics: NetFlow

The Strategic Value of Advanced Netflow for Enterprise Network Security

Posted by Rafi Sabel on Oct 19, 2016 8:34:45 AM

Networks today are exponentially faster, bigger and more complex than those of just a few years ago.

With thousands of devices going online for the first time each minute, and the data influx continuing unabated, it’s fair to say that we’re in the throes of an always-on culture.

As the network becomes arguably the most valuable asset of the 21st century business, IT departments will be looked at to provide not just operational functions, but, more importantly, strategic value.

Read More

Topics: NetFlow

How NetFlow Solves for Mandatory Data Retention Compliance

Posted by Rafi Sabel on Aug 8, 2016 11:24:23 AM

Compliance in IT is not new and laws regulating how organizations should manage their customer data exist such as: HIPPA, PCI, SCADA and Network transaction logging has begun to be required of business. Insurance companies are gearing up to qualify businesses by the information they retain to protect their services and customer information. Government and industry regulations and enforcement are becoming increasingly stringent.

Most recently many countries have begun to implement Mandatory Data Retention laws for telecom service providers.

Read More

Topics: NetFlow, Data Retention Compliance

NetFlow for Usage-Based Billing and Peering Analysis

Posted by Rafi Sabel on Jul 25, 2016 12:09:00 PM

Usage-based billing refers to the methods of calculating and passing back the costs of running a network to the consumers of data that occur through the network. Both Internet Service Providers (ISP) and Corporations have a need for Usage-based billing with different billing models.

NetFlow is the ideal technology for usage-based billing because it allows for the capture of all transactional information pertaining to the usage and some smart NetFlow technologies already exist to assist in the counting, allocation and substantiation of data usage.

Read More

Topics: NetFlow

How to Improve Cyber Security with Advanced Netflow Network Forensics

Posted by Rafi Sabel on Jul 7, 2016 7:30:00 AM

Most organizations today deploy network security tools that are built to perform limited prevention - traditionally “blocking and tackling” at the edge of a network using a firewall or by installing security software on every system.

This is only one third of a security solution, and has become the least effective measure.

Read More

Topics: Network Forensics, Cyber Security

5 Benefits of NetFlow Performance Monitoring

Posted by Rafi Sabel on Jun 28, 2016 11:43:19 AM

In today’s global marketplace there has never been more pressure on organizations to reduce costs in order to be competitive. No longer can an organization afford to ignore the ever-escalating costs associated with increasing complexity and the lack of visibility of network traffic. Time is money! A great deal of time is spent on painstaking and often unsuccessful searches for the causes of performance and security incidents and monitoring inappropriate network use and risk. Applications continue to grow in complexity and have ever increasing bandwidth. Network infrastructure is growing and increasing in cost and complexity.

Read More

Topics: NetFlow, Network Performance Management

Deploying NetFlow as a Countermeasure to Threats like CNB

Posted by Rafi Sabel on Jun 1, 2016 7:30:00 AM

Few would debate legendary martial artist Chuck Norris’ ability to take out any opponent with a quick combination of lightning-fast punches and kicks. Norris, after all, is legendary for his showdowns with the best of fighters and being the last man standing in some of the most brutal and memorable fight scenes. It’s no surprise, then, that hackers named one of their most dubious botnet attacks after “tough guy” Norris, which wreaked havoc on internet routers worldwide. The “Chuck Norris” botnet, or CNB, was strategically designed to target poorly configured Linux MIPS systems, network devices such as routers, CCTV cameras, switches, Wifi modems, etc. In a study on CNB, the University of Masaryk in the Czech Republic, examined the attack’s inner workings and demonstrated how it employed Netflow as a countermeasure to actively detect and incapacitate the threat.

Read More

Topics: NetFlow, Network Security

Why NetFlow is Perfect for Forensics and Compliance

Posted by Rafi Sabel on May 25, 2016 8:32:04 AM

As flow-data is rich in metadata and continues to be extended with more contexts, NetFlow Forensics offers the perfect method of how you can deal with a large aspect of network security.

Read More

Topics: Network Forensics