I think we can all agree why we initially saw the value of using NetFlow for troubleshooting and to provide the necessary data for apply policies around managing the data that traverses our networks. Now that your solution is in place and adoption activities are over now what? As my solution matures and new supporting processes are in place, I begin to look for ways to do more with the data that I am collecting.
I wanted to see what the community thought about the following questions.
- What is the benefit/use case for being about to see the actual user name logged into the device that is consuming the most data?
- Would you want NTA to handle directly or use another tool to pull that information?
- Which group(s) would benefit most from this? i.e network, security, etc.