Selected tag: elasticsearch

Sonicwall is one of the leaders in the cybersecurity and next-generation firewalls market. Also, this is one of the first companies that recognized a need for networked cybersecurity and observability on-prem and in the cloud. Their products can be physical, aimed at a wide range of customers from SMBs to Large enterprises, as well as virtual firewalls. Today we will configure virtual NsV 270

Read more...

VMware is a ubiquitous name in the virtualization world. It includes ESXi, VMware Workstation, Tanzu and many other products. These products are the first thing that comes up when people talk about virtual machines and other items dependent on them. In this post, we focus on ESXi, VMware's bare-metal hypervisor, and vCenter, VMware's multi-system management software.

NetFlow
Read more...

The OpenWrt Project is a Linux operating system that targets embedded devices. Instead of static firmware images, OpenWrt provides a filesystem with a package manager, similar to regular Linux systems. OpenWrt now supports numerous architectures, so you can install it on pretty much anything, even on hypervisors.

NetFlow configuration

For the NetFlow configuration, we will use

Read more...

Sophos Firewall Operating System (SFOS) is a purpose-built OS that is the core of Sophos XG firewall. The architecture has multiple options for mitigating the latest threats and modern-day features like SD-WAN, cloud application traffic, etc. Sophos has a great GUI that makes the configuration quite easy, and you would rarely need to dive into CLI.

 

NetFlow

Read more...

Proxmox Virtual Environment is a hypervisor on which you can host Virtual Machines and containers. It is a complex environment with open-source clustering and advanced backup and network capabilities. Therefore, it is really important to have a proper network insight, and in this blog post we will show just how easy it is to set everything up. Let's get started.

First, we need to

Read more...

Nutanix is a cloud OS for Hyperconverged Infrastructure (HCI). It allows you to control from one place your entire IT infrastructure, with a simple interface and/or on smartphones. Nutanix is usually used as a private cloud infrastructure, where the whole stack - processing, data, virtualization, and network resources - is integrated into Nutanix. Since you are putting all your eggs in one

Read more...

Virtualization is ubiquitous in the IT world. However, with the ever-increasing complexity, we are faced with the fact that our old tools are insufficient nowadays. That is why we need to accustom ourselves to diverse types of NetFlow configuration. In this post, we will examine the case of Hyper-V, a hypervisor developed by Microsoft.

Configuration

There are two types of Hyper-V

Read more...

Since Ubuntu 16.04 is approaching its end-of-life (you can, of course, extend it with ESM though that's another story), there is a need to keep your system up-to-date. Unlike CentOS and Red Hat, which don't support in-place upgrades, Ubuntu (and Debian) support upgrading to the new LTS on-the-go.

Procedure

Before we start the upgrade procedure on the NetVizura server, we need

Read more...

Usually, our customers configure NetFlow export directly on their devices (routers, switches, firewalls, etc). But in case the company policy (especially in Asian countries) prevents enabling export on devices, or if devices are not capable of exporting NetFlow data, we need to implement a NetFlow probe. There are paid probe software options available, however, we will focus on an open-source

Read more...

NetVizura is a complex software composed of a few databases, Tomcat, and a lot of code, supported on Windows and numerous Linux distributions for AMD64 architecture. With the advent of 8GB RAM RPI 4, there have been numerous projects using this version in its implementation. Maybe the most famous would be ESXi on ARM with project Monterrey (we internally dominantly use Proxmox, while Xen and

Read more...