topic Cisco ASA 9.1(3) Netflow problem in Network Security

Cisco ASA 9.1(3) Netflow problem

Rafael Mendes — Tue, 12 Mar 2019 04:09:29 GMT

Hello Everyone,

I have a Cisco ASA 5525-X with 9.1(3) version.

My problem is: When i send the flows to a CA NetQoS, CA cannot read the packet because the ASA doesn't send the templates(image attached).

So, how i can configure my ASA to send the templates/fields below to CA?

1 - IN_BYTES or 85 - IN_PERMANENT_BYTES InOctets
1 - IN_BYTES InOctets
4 - PROTOCOL Protocol
7 - L4_SRC_PORT Source port
8 - IPV4_SRC_ADDR Source Address
10 - INPUT_SNMP In interface
11 - L4_DST_PORT Dest port
12 - IPV4_DST_ADDR Dest address
14 - OUTPUT_SNMP Out interface

My ASA Netflow Configuration:

flow-export destination inside X.X.X.X 9995
flow-export template timeout-rate 1
flow-export delay flow-create 5

class-map netflow-class
match any

policy-map global_policy

class netflow-class
flow-export event-type all destination 10.96.37.15

Tks!

Hello Rafael, Did you set the

Michael Patterson — Mon, 05 May 2014 19:39:49 GMT

Hello Rafael,

Did you set the template timeout rate? Go to second 20 in this Cisco ASA NetFlow Configuration video on YouTube.com. This blog explains how to do it on the CLI.

Please vote on my reply if it helps you.

Thanks

Just updating the post.The

Rafael Mendes — Mon, 28 Jul 2014 18:29:46 GMT

Just updating the post.

The problem was in CA software.

Thanks a lot.

Rafael