https://community.cisco.com/t5/network-security/basic-netflow-questions-for-asa/m-p/3697202#M12628 Q1. No impact and you can have TCP-state-bypass with Netflow in same<BR />policy. Both will work<BR /><BR />Q2. No you won't see HTTP traffic in the analyzer because you won't have<BR />http flows. All of them will be dropped by ACL.<BR /> Wed, 29 Aug 2018 17:17:48 GMT Mohammed al Baqari 2018-08-29T17:17:48Z https://community.cisco.com/t5/network-security/basic-netflow-questions-for-asa/m-p/3696801#M12623 <P>It's the first time i'm actually configuring NetFlow. I've read the instructions how to configure NetFlow but i'm having 2 questions.<BR /><BR />1. I just want to export traffic from one interface, but we already have a TCP-Bypass Policy Map on that interface. Can i just add the NetFlow rule under that one? Will it have impact on traffic currently running through when applying that rule/policy map?</P> <P>2. Maybe a stupid question, but if i specify "any any" as source and destination within the Policy rule, will the inbound ACL on the interface still be applied? So let's say i have a inbound interface ACL to deny HTTP traffic, but the policy rule has "any any", i won't see any HTTP traffic on the analyzer, right?</P> <P>&nbsp;</P> <P>Thanks in advance and have a nice day!</P> Fri, 21 Feb 2020 16:09:48 GMT https://community.cisco.com/t5/network-security/basic-netflow-questions-for-asa/m-p/3696801#M12623 Eric Snijders 2020-02-21T16:09:48Z https://community.cisco.com/t5/network-security/basic-netflow-questions-for-asa/m-p/3697202#M12628 Q1. No impact and you can have TCP-state-bypass with Netflow in same<BR />policy. Both will work<BR /><BR />Q2. No you won't see HTTP traffic in the analyzer because you won't have<BR />http flows. All of them will be dropped by ACL.<BR /> Wed, 29 Aug 2018 17:17:48 GMT https://community.cisco.com/t5/network-security/basic-netflow-questions-for-asa/m-p/3697202#M12628 Mohammed al Baqari 2018-08-29T17:17:48Z