topic Hi Jcatalino, Please follow in Network Security

asa 5510 netflow

jcatalino — Tue, 26 Mar 2019 00:53:42 GMT

Hi Guys

Can you help me how to configure the netflow on asa 5510.

hi,you can use the command

johnlloyd_13 — Fri, 22 Aug 2014 05:25:00 GMT

hi,

you can use the command:

flow-export destination <INTERFACE> <NETFLOW COLLECTOR IP> <NETFLOW UDP PORT>

find useful link:

https://supportforums.cisco.com/document/30471/netflow-asa

In addition to the infos

Karsten Iwen — Fri, 22 Aug 2014 07:16:19 GMT

In addition to the infos already posted, there is of course also the Configuration-Guide explaining it:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/monitor_nsel.html

Hi Jcatalino, Please follow

rizwanr74 — Tue, 26 Aug 2014 16:51:19 GMT

Hi Jcatalino,

Please follow the below configs.

access-list acl-netflow extended permit ip any any

class-map class-my-netflow
match access-list acl-netflow

policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect pptp
class class-my-netflow
flow-export event-type all destination 192.168.0.1

You are done here, IP address 192.168.0.1 is your flow collector station.

Thanks

Rizwan Rafeek