SmartFlow is an appliance-based network security monitoring tool designed for medium and large enterprises. It uses anomaly detection and network behavior analysis to identify security threats, complementing existing signature-based security tools. SmartFlow analyzes network flow data (such as Netflow) using patent-pending algorithms to detect threats including address scans, DDoS attacks, botnets, port scans, and malware. It is capable of detecting zero-day attacks and encrypted malicious traffic (e.g., Botnet Command & Control) that signature-based tools may miss. The tool distills network traffic into more than 20 statistical measures, which are continuously analyzed for early indicators of cyber threats. Results are presented through alarms, long-term trend reports, and drill-down analysis. In addition to security monitoring, SmartFlow provides network traffic visibility, identifying applications consuming the most network resources, pinpointing the source of network congestion, and detecting network access to and from specific geographic locations. SmartFlow can operate as a standalone module or integrate with Solana's SmartHawk network mapping product to enable cyber situational awareness and forensic analysis capabilities.