NETWORK VISIBILITY FOR ISP

Detect threats, prevent outages, and monitor your network seamlessly — all in one intuitive Grafana dashboard.

        NETWORK VISIBILITY FOR ISP

        Detect threats, prevent outages, and monitor your network seamlessly — all in one intuitive Grafana dashboard.

        FLOWCUTTER

        TRANSPARENT NETWORK IS THE ONLY ONE, SECURE

        benefits

        Troubleshoot 4x more effecively

        Spot Every Issue in Your Network
        Gain full visibility into your network operations to ensure nothing goes unnoticed.

        Detect Anomalies Before They Disrupt
        Proactively monitor for irregularities and address potential threats before they escalate into costly problems.

              benefits

              Boost your revenue

              Upsell Traffic Analysis
              Provide in-depth traffic reports to help customers optimize their network performance.

              Enhance Security Posture Monitoring
              Deliver advanced security monitoring to protect critical business operations and add value to your services.

                VIDEO

                FLOWCUTTER IN ACTION

                reviews

                WITH WHOM DO WE SUCCESSFULLY COOPERATE

                FLOWCUTTER is being tested and deployed in our data centers.”

                “On the FLOWCUTTER collector, we gather flow telemetry for our extensive network. Surprisingly, the solution was swift in analytical queries, even in areas where others struggle.”

                Martin Mráz

                Features

                WE HAVE SOMETHING EXTRA FOR YOU

                 

                Fastest backend

                Nobody knows what the future brings. We don’t know where and what problem in network we are going to investigate tomorrow. Hence, the most important for any analyst is AD HOC query response speed.

                • FC queries raw dataset, no simplified aggregations
                • Thus you can make any query you think of

                Horizontal scaling of backend assures fast response even in huge datasets (1M+fps)

                Openness

                A traffic analysis tool cannot live in isolation. It should play fair with other boxes in your NOC/SOC software stack. 

                • Support all formats: sFlow, Netflow, syslog, … 
                • Provide full access & control via API 

                Export to open-source telemetry databases (e.g. Prometheus, Zabbix, Citrix)

                Data enrichment

                Raw data enrichment helps any tool to serve “in your network’s image”. 

                FC enriches with following fields: 

                • GeoIP location
                • ASN for Peering 
                • Custom fields enrichment, e.g. ids of your services or end customers
                Alerting and network health

                Each network is unique, with different segmentation, traffic composition. In order to be able to observe change in network behavior, monitoring has to be fine tuned individually. Don’t assume that vendor’s approach is the best for your network.

                • Monitors – preventive indicators defined as any arbitrary cut of flow dataset 
                • Custom fixed and adaptive threshold and detection rules
                Multi-tenant as a service for customers

                You can provide your most challenging customers with FLOWCUTTER as a service.

                Multi-tenant solution is a form of cloud architecture within which multiple clients share the same hardware resources.

                It means that several sub-networks or big customers of a service provider can utilize the one and the same FLOWCUTTER collector, each with his/her own credentials, setup, and dataset.

                Fast mitigation

                Example: My custom Monitor detects DNS packets flooding directed to your resolver. 

                What I need at that time is to quickly obtain context of a potential attack / issue. Only this way, I can mitigate the problem efficiently. 

                • A rule for firewall / shaping 
                • BGP FlowSpec
                Anomaly and threat detection

                Our networks take place on the complex battlefield of today’s cyber warfare.

                Every new technology and update brings new vulnerabilities. Pro network operators and their customers is responsible to detect threat from network traffic, such as:

                • Volumetric DDoS
                • Communication with known malware C2C 
                • Lateral movement (e.g. open SSH/ Telnet port scans) 
                • Brute-force attacks
                • Exfiltration of sensitive databases via ICMP or DNS protocol
                • Anomalies in BGP routing
                Non-invasive network probe

                Physical installation of FLOWCUTTER’s network probe is non-invasive for the provider’s infrastructure, ensured by utilization of so-called network TAPs. In the rare case of monitoring breakdown, operation of the network isn’t influenced at all.

                Moreover, FC probe can simultaneously export IPFIX and sampled sFlow. It allow for very fast volumetric DDoS detection.


                Customer servis

                Every FLOWCUTTER instance has multi-level support.

                Our team pro-actively monitors each device under our support. It’s treated as a “service”. We do preventive maintenance when there’s a threat of its function degradation.

                Security is part of our DNA. We will be glad to share our experiences and recommendations.


                Quick deployment

                Only in case of data centers, backbone and peering networks, FLOWCUTTER can be deployed on your own infrastructure (your own servers).

                Pouze pro data centra, páteřní a peeringové sítě lze FLOWCUTTER nasadit na vaši vlastní infrastrukturu (servery).

                • FLOWCUTTER is deployed by our team via monitored jump servers
                • as orchestrated Docker containers.
                • We use IaaC (infrastructure as a code) for fast configuration and update rollout.
                • Linux required (tested on Debian OS).
                Scalable for the next 20 years

                We think about what the future of networks will look like. If you are looking in the same direction, the FLOWCUTTER is for you!

                • Traffic doubles every 3 years. 
                • A solution that was ok yesterday, won’t be able to analyse huge flow datasets of tomorrow (1M+fps). And you might be forced to compromise!
                • FLOWCUTTER is horizontally scalable – can be deployed to 1 server or cluster of 20 nodes.
                • It will run smoothly even if your traffic increases 40x.
                FC Cloud

                All benefits of a physical FLOWCUTTER collector can be delivered as a service.

                This service runs on our cloud. We prepared utilities for easy and secure transport of your telemetry to our cloud.

                East-west fabric visibility

                Are you interested in obtaining visibility into traffic inside your data center?

                FLOWCUTTER is a tool with properties just for that, for Fabric Visibility.

                • Get detailed insight info “east-west” traffic.
                • It’s required that your “spine” switches can export flow data.

                Troubleshooting in microservice architecture will never be the same.


                WHY FLOWCUTTER

                TOOL “TO YOUR IMAGE”

                One UI to rule them all

                Technicians and admins from NetOps often use various tools with different user interfaces. FLOWCUTTER consolidates data from multiple sources and displays it in a single, user-friendly Open Source interface, Grafana.

                continents

                ISPs trust us

                Gb/s IP traffic in focus

                WE KNOW THAT EVERY NETWORK HAS ITS SPECIFICS

                TOGETHER, WE WILL FIND A SOLUTION FOR YOUR PROJECT