IBM Support

QRadar: What is the difference between QFlow and VFlow?

Question & Answer


What is the difference between QFlow and VFlow?



QRadar QFlow is layer 7 Network Activity Monitoring.
It is capable of:

  • Detection of threats through traffic profiling.
  • Compliance with policy and regulatory mandates via deep analysis of application data and protocols.
  • Social media monitoring.
  • Advanced incident analysis via correlation of flow data with log data.
  • Continuous profiling of assets.


VFlow supports virtualization. QRadar VFlow is designed to run on a virtual server and does not require extra hardware. It has the same functionality as a QFlow including Layer 7 Activity Monitoring.

Where do you find more information?

[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Flows","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.3;7.2","Edition":"All Editions","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018