Question & Answer
Question
What is the difference between QFlow and VFlow?
Answer
QFlow
QRadar QFlow is layer 7 Network Activity Monitoring.
It is capable of:
- Detection of threats through traffic profiling.
- Compliance with policy and regulatory mandates via deep analysis of application data and protocols.
- Social media monitoring.
- Advanced incident analysis via correlation of flow data with log data.
- Continuous profiling of assets.
VFlow
VFlow supports virtualization. QRadar VFlow is designed to run on a virtual server and does not require extra hardware. It has the same functionality as a QFlow including Layer 7 Activity Monitoring.
Where do you find more information?
[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Flows","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.3;7.2","Edition":"All Editions","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21682470