Introduction

Flowmon ADS is a modern system for the detection of anomalies and patterns of undesirable network behavior, which is based on an analysis of data flows in the network (flow). The main goal of the solution is to increase the external and internal security of a computer network. The main advantage over standard IDS systems lies in orientation on the overall behavior of a device on the network, which enables it to respond to yet unknown or specific threats for which the signature is not available. The Analysis section located in the Flowmon ADS module displays a quick overview of the latest events and overall statistics of events. This allows you to immediately identify problems or problematic devices in the network.

This user documentation is divided into the following chapters:

• Introduction – the first chapter aims to familiarize you with the features and capabilities of the Flowmon ADS module.

• Installation and configuration – the second chapter is intended for system administrators and is dedicated to the installation and detailed configuration of the module.

• Detection methods – the third chapter specifies the features of the application. Part of the chapter describes the best practices and interpretation of results.

• User interface – the fourth chapter describes the GUI of the application and is intended for an ordinary user.

• Contact information – the final chapter contains a summary of contacts for the vendor and distributor of the module.