Overview
NetFlow Optimizer (NFO) is a software-only processing engine for network flow data: NetFlow, IPFIX, sFlow, J-Flow, AWS VPC Flow logs, etc. It brings new monitoring and cyber defense capabilities to customers who run mission-critical applications across all regions and accounts on cloud platforms like AWS, as well as hybrid cloud infrastructures. NFO uses patented streaming technology that consumes and enriches flow records with other data, applies rules and algorithms to extract the information needed to address desired use cases, and sends it to your visualization platform or SIEM (e.g. Splunk Enterprise or Splunk Cloud, Exabeam, VMware vR Log Insight, or Sumo Logic).
Highlights
- One NFO instance is capable of ingesting and processing VPC Flow logs from multiple AWS accounts, VPCs, and regions. NFO supports EC2 Enhanced Fan-Out and shards for increased performance.
- NetFlow Optimizer enriches native VPC Flow logs with real-time information, such as EC2 name, DNS name, and AWS region.
- NFO consolidates and optimizes VPC Flow logs data thus enabling customers to store and index only a fraction of volume and at the same time gain all benefits of flow information without losing accuracy.
Details
Features and programs
Financing for AWS Marketplace purchases
Pricing
Additional AWS infrastructure costs
Type | Cost |
|---|---|
EBS Magnetic volumes | $0.125/per GB/month of provisioned storage |
EBS Magnetic volumes | $0.065/per 1 million I/O requests |
Vendor refund policy
60 days free trial license
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
After deploying the instance, click on Manage in AWS Console to see the running instance and public IP address to continue the configuration of NFO. Connect to the secured Web UI via the public IP address: https://<public IP address>:8443 and login as admin/<InstanceID>.
Resources
Vendor resources
Support
Vendor support
Telephone and WebEx/Zoom, M-F 8am - 6pm PST Email us at support@netflowlogic.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
