We monitor all Orion services, including netflow and TFTP server from SAM. Also have a poller in for the netflow storage service running on the flow storage server.
It makes sense to me, as although SAM and NPM are both virtual machines, they're running on separate physical hosts.