Flows on Purview

  • 0
  • 1
  • Question
  • Updated 5 years ago
What is different between flow and session? Most of firewall keep the session information for the traffic. Can we use that information to calculate the requirement of the flow/mins license for Preview Engine?

Photo of Elmer


  • 250 Points 250 badge 2x thumb

Posted 5 years ago

  • 0
  • 1
Photo of Ferrer, Salvador

Ferrer, Salvador, Employee

  • 230 Points 100 badge 2x thumb
Flow are accounted unirectionally in periods of 60s. The session in your firewall is probably bidirectional so your flows/s should be roughly double your firewall sessions.

One point, thought, that is the value at the point where the firewall is located. If you take traffic from other points in the network to purview, the results are completely unrelated.