banner

Courses

pic

Understanding Netflow and IPFIX for CyberSecurity

Course Description

In today’s complex enterprise networks, Network Performance Monitoring has become crucial for network and security administrators, especially as network throughput exceeds 10 Gbps Ethernet. This course focuses on the significance of sophisticated network monitoring and analysis tools essential for fixing network issues, identifying threats, and addressing cybersecurity concerns.

Cisco Systems introduced Netflow technology as a pioneering solution. Netflow allows the aggregation of flow data from multiple records derived from individual packets flowing within a network. Initially designed as a network monitoring and analysis tool, Netflow has evolved into a powerful security visibility tool with incident response capabilities.

During this course, we delve deep into the Netflow and IPFIX specifications, examining their relevance not only in network monitoring but also in enhancing security visibility. Through comprehensive lessons and practical examples, you will gain an in-depth understanding of flow technology and its invaluable contributions to network performance optimisation and robust security practices.

Course Highlights
  • Introduction to Flow Monitoring – Understand network flow monitoring and how it helps in better network planning and analysis and how Flow Monitoring helps in network optimisation and troubleshooting.
  • Definition of Flow in Netflow – Study the definition of Flow in Netflow as Cisco introduced in 1996. Understand different other Flow definitions such as Sflow, Jflow, etc.
  • Netflow V5 and V9 – Explore the internals of Netflow V5 and V9 specifications.
  • IPFIX – Understand the internals of IPFIX specification and appreciate the difference it has with Netflow v9.
  • Applicability of Netflow / IPFIX in Cyber Security – Learn to use Netflow / IPFIX-based analysis tools in the context of security visibility and how these analysis tools can complement NDR solutions in a network.
  • Netflow Analysis Tools – Explore a set of Netflow analysis tools and understand their features and capabilities.
Eligibility requirements / Prerequisite knowledge

Participants should be conversant in Networking and Cryptographic algorithms basics. Knowledge of PKI and basic working knowledge of OpenSSL is an added advantage.

Who should take this course?

Cybersecurity Professionals
Developers Involved
System Administrators
IT Professionals
Learning
Students
pic
Scroll to Top