Enterprise network teams spend too much time configuring the tools that are supposed to save them time. SNMP polling setup is one of the biggest offenders: manually entering credentials, assigning device groups, mapping OID sets — for every device, across every subnet.
NFO 2.12.0 changes that. This major release ships the Zero-Touch Discovery Engine, a fully automated SNMP discovery and classification system that turns hours of setup into seconds. Define your subnets, and NFO takes care of the rest.
ZERO-TOUCH SNMP: HOW IT WORKS
The Zero-Touch Discovery Engine is built around three core ideas: find everything, classify it correctly, and keep it current.
Find everything
When credentials are not specified for a subnet, NFO now automatically polls using all configured credentials — no manual assignment required. Combined with real-time subnet probing, your device inventory populates itself.
Classify it correctly
A new Device Type field automatically categorizes hardware — core switches, firewalls, routers, wireless controllers — across all major vendors. Classification logic is customizable via GUI mapping tabs or YAML rule sets. Devices can also be assigned to multiple Device Groups (Vendor, Role, Feature) for precise segmentation.
Keep it current
When your hardware changes, NFO changes with it. Dashboards and metrics update automatically — no manual re-configuration when devices are added, replaced, or reconfigured.
SNMP POLLING RULES: REPORT WHAT MATTERS
Large-scale environments generate a lot of polling data. Most of it isn’t useful. In 2.12.0, you can define custom SNMP Polling Rules using logical and comparison operators to filter polling output down to only the interfaces and devices that matter. The result: lower data volume, faster analysis, less noise.
AES-256C FOR SNMPV3
This release adds support for AES-256C encryption in SNMPv3 — a 256-bit Cipher Feedback mode implementation designed for compatibility with high-security Cisco and OpenSSL-based systems. For organizations with strict telemetry security requirements, this closes a meaningful gap.
MICROSOFT AD INTEGRATION, NOW ON LINUX
Until now, enriching flow data with Active Directory usernames required a Windows-based External Data Feeder for NFO (EDFN). In 2.12.0, that integration works natively on Linux via WinRM, eliminating a common deployment constraint for Linux-first environments.
UNIFIED HEC OUTPUT: SPLUNK AND CROWDSTRIKE
NFO’s HTTP Event Collector output now natively supports both Splunk and CrowdStrike Falcon LogScale through a single, unified integration. Organizations running either — or both — SIEM platforms get a consistent, high-performance ingestion path with no separate configuration needed.
NFO CENTRAL: PREVIEW
We’re also shipping an early preview of NFO Central, a dynamic load balancing layer that distributes incoming traffic across NFO peer nodes. The system continuously monitors flow rates per exporter and automatically rebalances when nodes join or leave the cluster. This is early access — we’re actively iterating based on feedback.
AVAILABILITY & UPGRADE
NFO 2.12.0 is available now. This release is supported through March 9, 2028.
Full release notes: docs.netflowlogic.com/release-notes
Download: netflowlogic.com/downloads