Auto-recognized applications
Alluvio Flow Gateway receives flow information from a variety of sources and sends it to NetProfiler. Many of the flow collectors that provide this information also recognize the applications that are producing the flows they are monitoring. NetProfiler obtains application identification information from the following sources:
-
Sensor - information provided by a Cascade Sensor.
-
AppResponse 11 - information provided by an AppResponse 11.
-
Palo Alto Networks - information provided by a Palo Alto Networks product.
-
AppFlow - information provided by a Citrix product that supports AppFlow.
-
NBAR - requires a Cisco device to be sending Network-Based Application Recognition data to NetProfiler.
-
Packeteer - requires a compatible Packeteer device to be sending Flow Detail Records to NetProfiler.
-
NetShark - information provided by a NetShark.
-
SteelHead - requires the SteelHead to be sending SteelFlow Net information to NetProfiler.
Application names from each of these sources are displayed on the Definitions > Applications page Auto-Recognized tab. On this tab you can:
-
Search for an application by name. To search for an application, enter the application name, select the applicable "Show sources" criteria, and then click Apply.
-
Filter the application list to names provided by selected sources. Select the applicable "Show sources" criteria and click Apply.
-
Specify which sources of Auto-Recognized application names are used for the look-up and auto-complete features used elsewhere in NetProfiler. (General and URL-based application names are always offered as auto-complete options.) In the "Include applications from these sources in lists" section, select one or more sources and click Save Settings.
The application definitions listed on this page are read-only with the exception of custom Layer 7 applications that were defined before version 10.9.5 of the product. Legacy Layer 7 definitions that are based on hex numbers or text strings are preserved when the product is updated. They become read only. They can be deleted but not modified. They will continue to be pushed to Cascade Sensor devices and they can continue to be used "as is" on NetProfiler. However, they cannot be pushed to NetShark or AppResponse 11 when the application definitions on those products are synchronized with NetProfiler.