This use case enables quick decisions on network data flows, traffic spikes and deviations. It helps to identify DDoS of services, volume-based Data Leakage detection and Misconfigurations based on correlation of Netflow traffic in your SIEM. Netflow Security Monitor enables real-time traffic profiling of most commonly used network services including SSH, email traffic (SMTP, POP3), HTTP/S, DNS, FTP, DB, RDP, NTP, NETBIOS and other traffic types. Historical baseline is formed for the same services and aggregated for last 30 days with traffic statistics in megabytes.