Blog
Articles and guides on FlowPro NG
Blind spots in your network: why you must know what runs on your servers
Unknown software, forgotten accounts and unpatched packages are a common way in for attackers. Why visibility of software and updates is security's base.
Read the article
Software & Vulnerabilities: What Runs on Your Servers and What Needs Fixing
How FlowPro NG finds packages, updates, accounts, services and ports on servers and endpoints without extra software, and which vulnerabilities to fix.
Read the article
Reputation Databases and CVE: How FlowPro NG Tracks Threats and Vulnerabilities
Where FlowPro NG gets lists of malicious addresses and vulnerability data, how it compares them with your traffic and how it matches CVEs to your devices.
Read the article
Elastic Agent: Collecting Logs and Metrics From Linux and Windows
How to deploy Elastic Agent on Linux and Windows machines, what it collects, how policies control collection and how FlowPro NG evaluates the data.
Read the guide
Collecting Syslog: Network Device Logs and How They Are Evaluated
How to send syslog to FlowPro NG from MikroTik, UniFi, Linux and other devices, and how logs turn into alerts: parsing, detection rules and events.
Read the guide
Collecting NetFlow: Sending Data From Linux, MikroTik and Switches
How to send NetFlow and IPFIX to FlowPro NG from a MikroTik router, from Linux with softflowd and from a switch, and how to check that the data arrives.
Read the guide
How FlowPro NG Works: From Data Collection to Alerts
What happens to logs and network flows in FlowPro NG: collection from agents, syslog and NetFlow, storage, detection, Event Center and notifications.
Read the article