Collapse & Return to Top
SIEM Flow Collectors are deployed at strategic points in the network to collect IP traffic flow information from a broad range of networked devices - including switches, routers, security appliances, servers, and applications. SIEM Flow Collectors go beyond traditional flow-based data sources to enable application-layer (L1-L7) flow analysis and anomaly detection. Deep packet and content inspection capabilities identify threats tunneled over standard protocols and ports. Flow Collectors interface with the Extreme Networks SIEM Allin-One Appliances or the SIEM Flow Processor. A SIEM Virtual Flow Collector is a virtual appliance that enables the analysis of network behavior and Layer 7 visibility within the enterprise's virtual infrastructure.