IPFIX data collection via standalone IPFIX probes is an alternative to flow collection from routers and switches. Which use case is suitable for using IPFIX probes?

Question

Options

• Aperformance monitoring
• Bsecurity
• Cobservation of critical links
• Dcapacity planning

• A
  10% (3)
• B
  3% (1)
• C
  72% (21)
• D
  14% (4)

Explanation

Standalone IPFIX probes are hardware or software appliances deployed via network taps or SPAN ports directly on a physical segment, independent of the network device forwarding traffic. Their primary advantage over router/switch-based flow export is granular, link-level visibility - they capture every packet on a specific link regardless of whether the adjacent device supports NetFlow/IPFIX or has the CPU headroom to sample and export flows. This makes them ideal for observing critical links (e.g., a peering connection, a data center interconnect, or a segment between two third-party appliances) where guaranteed, non-sampled visibility is required. Performance monitoring (A), security (B), and capacity planning (D) can all benefit from flow data, but those use cases are equally or better served by aggregated flow exports from routers and switches across the whole network; they do not specifically justify the targeted, link-level deployment model of a standalone probe.

No community discussion yet for this question.