Quick Configuration

Basic configuration of the module consists of three steps:

1. Log in to the module – use the same credentials as when logging into the Flowmon Configuration Center. You can change your password and set other users in the System tab of the Flowmon Configuration Center. You can find more information about the management of user accounts in the documentation of the Flowmon appliance. The user currently logged in can be modified by clicking the button with the username in the upper-right corner.
2. Going through the Configuration wizard – the welcome window with the link to the configuration wizard displays after the first login to the application (the wizard can also be started by clicking the question mark icon next to CONFIGURATION WIZARD in the Settings section). The first step of the configuration wizard is to apply the configuration template. The template creates the basic IP range filters and sets default values to the parameters of detection methods. It is possible to:
   • Extend the LAN filter based on private IP ranges of the public IP addresses of the monitored network segment
   • Define specific devices in the network (for example, DNS servers) and,
   • Set the size of the monitored network. It is also possible to enable the external automatic update services of the resources which tend to change over time, such as blacklists and behavioral patterns. To enable this functionality, an Internet connection is required. All set values are used for relevant detection method parameters.
3. Configuring the Flow data sources – set up particular sources of Flow data that will be processed by the application in the section Settings → Processing → Data feeds. From the aspect of data collection, the application works like a collector which is capable of receiving the data in the NetFlow v5/v9 format. For each source:
   1. Enter a unique Name
   2. Select the profile and the channels that should be used as an input.
   3. Set all data sources you want to use as active.