jreves ✭✭✭✭✭

Thinking about NPM, NTA, and perhaps NCM - as well as some of the IPSLA capabilities in VNQM - what new capabilities would you like to see in the Orion suite of products that would make SD-WAN management easier/better for you? How often do you change policies for the various types of traffic you run? Is that usually just…

What models are your guys running? Are you ready to test? Do you have some non-production boxes, or have you already set up to divert some of your production flow traffic to an eval instance? Get ready! jreves​

The "Remaining Traffic" component still can not be composed into the graph alongside individual conversations at this point. We'll consider that feature request for a future release. I've updated the status of this FR to reflect that. jreves​

https://thwack.solarwinds.com/t5/NTA-Documents/Introducing-the-NTA-2020-2-Release-Candidate-IPAM-IP-Group/ta-p/590017 @"jreves" 

Confirm that here: SSL/TLS OCSP and CRL in DigiCert new Web PKI hierarchy certificates

Can you open a support ticket on this, and just DM me the ticket ID? I'll walk this back through the dev team, and this way we'll keep a record of the information they will need to get this resolved. Go ahead and collect an snmpwalk as well; they will help us figure out the disconnect here faster. If we need to, I can go…

Do either of you have a support ticket open on this issue already? Please DM me with the details, and I'll follow up. @"jreves"

The new MIB file with the Palo Alto / CloudGenix should be available for download now. Please download and import this latest MIB file and test it out - let me know what you find, and if there's any follow up needed please post that back into this thread!

We're working directly with the Palo Alto / CloudGenix team this week to get these integrated. As soon as they are available, I'll come back with an update and ask you to verify they're working correctly in your environment. Thanks for surfacing this, and helping us to validate the solution. @jreves

I'm the Product Manager for NPM, and we're working directly with a contact at Palo Alto to get these MIBS loaded and available in the MIB Database. We are preparing to integrate them this week, and your should be able to load them next week. See: Add MIBs to the SolarWinds MIB database We've also done some research with…

Rohan, DM me with some times/date that work for you next week, and we can discuss some work we're doing now that may be interesting to you. NTA supports NetFlow v9, and also supports IPFIX - among other flow-export protocols. We also support sFlow. We don't support all of the information elements in both the NetFlow and…

Ralph, I'm the product manager for NTA, and I'd be happy to discuss some features we're working on now that might be of interest - can you drop me a DM with times/dates next week that would work for you? @"jreves"

Are there switches in the environment that support sFlow? Sometimes looking to other devices for flow protocols other than NetFlow may give you the traffic insights you're looking for. @"jreves"

Have a look at the "What We're Working On" post for NTA. One of the SD-WAN edge solutions we're working on supporting is the Viptela solution. Watch this space for our upcoming beta announcements, once we're ready to do some testing. @"jreves" 

That's an excellent point; this technique assumes that you are analyzing flow from an observation point where this traffic is actually visible. For many companies running split-tunnel configurations, the traffic from work at home offices never passes through corporate internet routers or firewalls - it's routed directly…

The traffic you see is what's reported by an individual interface. For most routers (where NAT is not occuring) we can reconcile traffic the passes through multiple interfaces in the same node - see the 2020.2 Release announcement for the Traffic Reconciliation feature. We don't yet have the ability to perform flow…

Microsoft publishes an excellent comprehensive resource for IP address ranges and ports used by the O365 ecosystem here. It's complex, but you can evaluate this list and determine what applies to your environment. @"jreves" 

Certainly! You can use the Flow Navigator on the NTA summary page to select specific applications by name or port number, and filter your view based on that selection criteria. You can also alert for traffic volumes with specific applications / ports using the Alerting feature. See these two articles: ALERT! NTA 4.5…

Have a look at the cisco configuration guide for Cisco IOS XE. In particular, there's a section on reporting NBAR2 information through Flexible NetFlow. Post some additional details on the model you're configuring, and let's see if other users have worked through this already for their gear. @"jreves" 

We'll need to take a closer look at this one to understand what's going on. There may be some mis-match between the configuration data we'll polling with SNMP, and the interface indexes we see in the flow records. Usually, to resolve this we'd capture a pcap from the device to the Orion flow collector with flow records.…

Have a look at this thread for a discussion on the 9200, also this reply I sent to an email on this topic: I would expect they would configure this model for sflow; we have a number of other customers using this model as a source for flow data for NTA. The config guide is here:…

Erik, do you have a support ticket open on this yet? I can help engage the development team, but I'll need your diagnostics. I'll email you directly. @"jreves" 

I will also check in with the development team on this. @"jreves" 

@"kpmarcin" we are still working on Juniper RPM support, but as the update indicates our priority is the safety and security of our products and platform. Stay tuned, and watch for beta announcements which may preview upcoming features. @"jreves" 

Justin, I'll ask one of our senior engineers to connect with you to help clean this up. In the mean time, here's an article that explains how to delete obsolete collectors from the database: Success Center This may resolve this issue for you - jreves​

We just completed performance testing for an SQL server configuration that hosts the Orion DB, the NTA Flow Storage DB, and a Log Manager DB in a single SQL instance. We're incorporating that configuration and a set of recommendations into our documentation now; I'll come back and post the pointer in this thread. Bottom…

This feature has not been implemented yet; it's something we're considering. This kind of feedback is very useful, thanks! jreves​

datojo​, What version of NTA are you running now? Have you opened a support ticket? joer

Here's a pointer to some recent updates we've published:UDT vNext API · solarwinds/OrionSDK Wiki · GitHub jreves​

We don't have this specific alert in NTA, but it's an interesting use case. For alerts in NTA, we need a particular context - in this case, a node or interface reporting flow traffic. So - I'm thinking that an alert for a domain being accessed would reference a particular context, a source endpoint or IP group accessing…