The Flowmon Probe is the most powerful flow data exporter on the market that generates data down to the application level and measures performance.
Visibility into L2, L3/4, L7
Probes natively collect L2–L4 information on IP addresses, protocols, server response time, round trip time, jitter, and more, while leveraging traffic decapsulation to monitor the real user-application conversation instead of the tunnel itself. In addition, Flowmon's IPFIX extension provides additional L7 data, such as hostnames, URLs, browser information for HTTP/S protocols, and other fields for protocols like DNS, DHCP, SQL, SMTP, or Samba/CIFS, and more.
Network Performance Monitoring
Leveraging a wide array of metrics, it enables insight into the performance of the network. The Probe measures server delay (Server Response Time) and network delay (Round Trip Time), as well as Jitter, TCP Retransmissions or out-of-order packets.
Encrypted traffic analysis
Flowmon’s encrypted traffic analysis collects network traffic metadata in the IPFIX format using Probes and enriches it with TLS protocol information. This provides a wealth of information about the traffic and allows for the identification of out-of-date SSL certificates, policy non-compliant certificates, encryption strength and old TLS versions that may contain faults or vulnerabilities.
Application recognition and usage data
Flowmon reports on the use of applications by analyzing L7 packets and exporting Network-Based Application Recognition (NBAR2) name or provides information on the source or destination of network traffic with the Autonomous System (AS) number.
Suricata IDS extension
Using a Suricata IDS extension for the Probe enables packet inspection to seek potential intrusion, complementing the signature-less approach of Flowmon ADS and providing an additional level of security. The extension works in environments of any link speed from 1 Gb/s to 100 Gb/s, and the detected events may be exported to any target.
Provides deeper visibility that uncovers problems impacting user experience rather than just the red/green status information of server availability.
Reduction of Information Noise
Flowmon Probe collects network data and pre-filters it for relevant information, allowing for clearer analysis and visualization while also saving capacity and reducing investigation time.
No matter what type of network, a Flowmon Probe can be deployed anywhere without any impact on network traffic from 10 Mbps to 100 Gbps. As a virtual appliance, it can be deployed in virtual environments such as VMware, Hyper-V or OpenStack KVM or as a cloud application in AWS, Azure and Google Cloud.
The Probe connects passively through a SPAN port or network TAP and therefore represents no potential point of failure or hindrance. It is transparent from the L2/ L3 perspective. In addition, the Probe supports remote monitoring sessions via GRE, ERSPAN or VxLAN.
Statistics from All Network Layers
Probes natively collect L2–L4 information on communication IPs, protocols, server response time, round trip time, jitter, and more. Flowmon’s IPFIX extension provides additional L7 data, such as hostnames, URLs, browser information for HTTP/S protocols and other fields for protocols such as DNS, DHCP, SQL, SMTP, or Samba/CIFS.
A single Flowmon Probe can provide everything needed to monitor a smaller network, or combine with a Collector to cover the most complex, large distributed networks.
On local martkets Bakotech Group operates through a well-established partner network, including over 1,000 active dealers. Key IT-integrators and are involved in the realization of large-scale projects concerning implementing solutions for end-customers from various segments of business. Bakotech's business strategy is True Value Added Distribution or in other words - project oriented distribution.
We are providing our partners with a wide range of services such as PR, co-marketing activities, pre post-sales support, trainings for partners and end-customers, PoC, PoV, solution consulting, implementation support and technical support.