topic Re: Configuring netflow on FTD firewall 6.4 in Network Security

Configuring netflow on FTD firewall 6.4

wanwa01 — Fri, 15 May 2020 02:37:32 GMT

Hi guys,

Need your help on below situation.

I would like to configure the netflow on the FTD. FMC is running on 6.4. I created new flexconfig object and defined the destination. Created new flexconfig policy and assign the firewall accordingly. These are fine.

Then i assigned the flextconfig object to the append flexconfigs.

when i tried to you use the preview config and select the firewall i wanted to, there is no cli config shown related to flow configuration. Also no policy-map global_policy being shown as well.

Just wondering if this a bug or and i need to push to see if that working?

Re: Configuring netflow on FTD firewall 6.4

wanwa01 — Fri, 15 May 2020 02:39:36 GMT

the snip or preview config attached

Re: Configuring netflow on FTD firewall 6.4

Marvin Rhoads — Fri, 15 May 2020 03:39:39 GMT

For FTD 6.6 and all earlier releases the source interface for Netflow must be the diagnostic interface. Netflow is handled by the LINA (ASA) susbystem exclusively.

Re: Configuring netflow on FTD firewall 6.4

wanwa01 — Fri, 15 May 2020 04:51:49 GMT

Hi Thanks for reply.

>From the Cisco note, it mentioned I can use other interface. If I use other interface, is the MANAGEMENT name is the mandatory to be used for that interface?
Would it not work if using another interface?

Note:
Alternatively, a different physical / logical interface may also be used for exporting NetFlow
instead of the diagnostic0/0 interface. The process to configure the interface remains the
same as given below.
Configure the Logical Name and IP address for this interface, if not already done earlier. Click on
the edit (Pencil icon) for the Diagnostic0/0 interface.
Set the name as MANAGEMENT and click on the IPv4 tab to set the IP address and prefix. The IP
address provided here must be in the same subnet as the Management interface of the FTD

At the same time, the firewall is running transparent and using BVI. Can I use BVI for transparent firewall?

Re: Configuring netflow on FTD firewall 6.4

Marvin Rhoads — Fri, 15 May 2020 12:02:27 GMT

I've never tried it with transparent mode. I do know it works with the diagnostic interface.