FlowPro Online Documentation#
Deployment and setup#
Deployment
Deploy your virtual or hardware appliance
Appliance setup
Initial setup, licensing, and SSL configuration
Upgrades
Upgrade to the latest release
Exploring FlowPro#
Custom rules
Enable and manage NIDS rules on FlowPro and custom Suricata rules
Rule updates
Manage and customize Suricata rules
Selective packet capture
Configure FlowPro to capture specific network packets for targeted traffic analysis
FlowPro exclusions
Exclude trusted hosts or networks from FlowPro detections
Untrusted domain lists
Define domain reputation rules using external or custom lists for threat detection
ERSPAN
Configure ERSPAN to mirror and route traffic over GRE to the FlowPro monitor interface
Help and references#
Changelog
Version history and release notes
Glossary
Glossary of terms used in FlowPro
Attributions
Open source and third-party licenses
FlowPro is an advanced module of the Plixer One platform that delivers network visibility and actionable insights across both performance and security. It allows your team to capture, analyze, and forward enriched flow data even in environments with infrastructure constraints.
Selective packet capture - Capture specific network packets for targeted traffic analysis.
Threat detection - Detect suspicious events using a threat feed and custom NIDS rules.
DNS monitoring - Identify domains likely associated with malware, analyze DNS Start of Authority and DNS TXT messaging for potentially suspicious behavior, and apply user-defined domain whitelists and blacklists.
Malware and botnet detection - Monitor for data exfiltration and command-and-control traffic, with TLS and JA3 signature reporting and reporting on HTTP connections and transferred file hashes.