User's Guide

Document Version
21 of 218
ExtremeAnalytics™ Help
ExtremeAnalytics provides Layer 7 application visibility on your network.
Combining Extreme Management Center, S-Series and/or K-Series devices, and
the ExtremeAnalytics engine, this feature integrates application, user, and
device data to give you a full understanding of the applications on your network
and who's using those applications.
ExtremeAnalytics uses deep packet inspection (DPI) and a rich set of
application fingerprinting techniques to provide granular control of private
applications (SAP, SOA traffic, Exchange, SQL, etc.), public cloud applications
(Salesforce, Google, Email, YouTube, P2P, file sharing, etc.), as well as social
media applications (Facebook, Twitter, etc.), guaranteeing a quality user
experience for business critical applications.
The combination of patent pending application flow sampling, flow statistics
collection in hardware, and custom flow-based network processors (CoreFlow2)
is at the heart of ExtremeAnalytics. ExtremeAnalytics samples up to 32 packets
of every new flow. The CoreFlow2 ASIC identifies those new flows and sends the
packets to the ExtremeAnalytics engine where it is combined with the non-
sampled NetFlow traffic for the remainder of the flow, allowing the
ExtremeAnalytics engine to process traffic at unprecedented scale. The
ExtremeAnalytics engine determines the application, aggregates the data, adds
additional context, and then sends it to Extreme Management Center for
visibility.
In addition, you can collect application telemetry (SFlow) flows on ExtremeXOS
devices. This allows you to use your ExtremeXOS devices as flow collectors,
providing a more complete picture of the applications access on your network
and the performance of those applications.
ExtremeAnalytics requires the NMS-ADV license.
Document Version
The following table displays the revision history for the ExtremeAnalytics Help
documentation.