Application unification

Question

Hi!

I don't know if there already is a solution to my question (couldn't find it), so there it goes:

Were using NTA module (installed v3.6) and in it we have defined various multi port applications that could be thought of as a part of the whole  system (for example: many different applications for telephony, which we'd like to monitor separately but also had the chance to see them together - what amount and which data(SA, DA, ...) is transfered within defined application).

So the question is, is there possible to define applications which you can nest in another defined application (as a part of that new application)? And if its not - is there a solution for that on any roadmap for NTA development?

Thanks

clmb511 · Answer

This would also be a valuable enhancement for us. Now that NTA 3.6 allows you to define applications by port range and ip address this feature really makes alot of sense - we want to break down certain applications like VoIP to show both components (RTP and signaling) but also be able to "add them back up" for a complete view.

Gustelj · Answer

We'll track it as an enhancement request.  If there are others interested, please chime in to help us prioritize.

Please add me to the waiting list.

chris.lapoint · Answer

Were using NTA module (installed v3.6) and in it we have defined various multi port applications that could be thought of as a part of the whole  system (for example: many different applications for telephony, which we'd like to monitor separately but also had the chance to see them together - what amount and which data(SA, DA, ...) is transfered within defined application).

When you define application mappings, they must be unique so that traffic can be assigned to the application label as the flow data is received by NTA.

So the question is, is there possible to define applications which you can nest in another defined application (as a part of that new application)? And if its not - is there a solution for that on any roadmap for NTA development?

We'll track it as an enhancement request.  If there are others interested, please chime in to help us prioritize.