Each URL that is seen by the Sensor is shown on the dashboard or searchable via reporting.

Customer defined URL ' s are mapped to an application name which can then be shown on the dashboard, searched via reporting, or used in Analytic definitions.

URL ' s are tracked by either a Cascade Sensor or via NetFlow version 5 (or higher) export.

Cascade does not track URL ' s.

Layer 7 fingerprint matches always take priority over Layer 4 matches.

Layer 4 mappings with a higher priority number take precedence over Layer 4 mappings with a lower priority number.

Layer 4 mappings always take priority over Layer 7 fingerprint matches when the override is set to Unknown/Unclassified.

Layer 4 mappings with a lower priority number take precedence over Layer 4 mappings with a higher priority number when the override is set to Always.

C & D.

A, B & C.

Creating or modifying custom host groups.

Grant other users the ability to run user reports.

Set or modify passwords for other users.

View the audit trail page.

Specify mitigation actions.

Cache the most recent 500 IPs.

Obey DNS TTLs.

Cascade does not cache DNS responses.

For 24 hours.

If the Layer 4 mapping override policy is not " Unknown/Unclassified " , the Layer 4 mapping applies to flows not passing a Sensor or other application fingerprinting device as well as to flows not matching any defined Layer 7 fingerprint

If the Layer 4 mapping override policy is " Always " , then the Layer 7 fingerprint will never be used for flows matching both criteria

If the Layer 4 mapping override policy is " Unclassified " , the Layer 4 mapping only applies to flows not passing a Sensor or other application fingerprinting device

If the Layer 4 mapping override policy is " Unknown/Unclassified " , the Layer 4 mapping applies to flows not passing a Sensor or other application fingerprinting device as well as to flows not matching any defined Layer 7 fingerprint

Care must be taken when defining reports and policies to reflect overlapping definitions and the Layer 4 override policy

The traffic Expression " app L7_fingerprint or app L4_mapping " will catch all traffic flows for the application data in a report

Switch Port Discovery Protocol (SPDP)

Merging of CAM + ARP tables, both gathered via SNMP

Merging of IF and ARP tables, both gathered via SNMP

Merging of IF and CAM tables, both gathered via SNMP

10.0.0.0/23 United_States

0.0.0.0/0.0.0.0 Worldwide

24.32.8.43/32 CEO_Printer

192.168.0.5/255.0.255.0 Printers

10.38.14.1/255.255.255.255 My Computer

Select two views from the views panel using control-click then right click on one and select " Create Interactive View " from the drop-down menu.

After a Drill-Down from one view to another, right click on the Drill-Down view in the sources panel and select " Create Interactive View " from the drop-down menu.

Select any item (such as a host IP Address, Port or Protocol name) in the main workspace and right click on the item, then select " Create Interactive View " from the drop-down menu.

Select any view in the views panel, right-click it and select " Create Interactive View " from the drop-down menu.

Open the filters panel, apply an existing or new filter to the view then select " save as interactive view " from the home menu.

Cascade Sensor only

Cannot get QoS data on Cascade

Cascade Sensor and Cascade Gateway

CascadeFlow traffic only

NetFlow and IPFIX traffic only

Changes are saved only in the View to which the filter has been applied.

The modified filter is saved on the machine on which Cascade Pilot is running.

The modified filter is saved on any Cascade Shark that Cascade Pilot is connected to.

The changes are lost when you close Cascade Pilot.