topic Netflow Analyzer in Network Security https://community.cisco.com/t5/network-security/netflow-analyzer/m-p/2337502#M344404 <HTML><HEAD></HEAD><BODY><P>You inbound access-list should just specify the source and destination address and destination port (TCP 9996). You cannot specify source port for the reason you noted. </P><P></P><P>The way I suggested is the standard approach for allowing inbound traffic on an ASA.</P></BODY></HTML> Tue, 20 Aug 2013 12:43:57 GMT Marvin Rhoads 2013-08-20T12:43:57Z Netflow Analyzer https://community.cisco.com/t5/network-security/netflow-analyzer/m-p/2337500#M344402 <P>Hi,</P><P></P><P>We are using Manage Engine product Netflow Analyzer, we are facing a problem in traffic flow between Netflow server and Edge routers. No packet has been received in Netflow server from Edge routers. between Edge routers and Netflow server ASA is installed. Router uses dynamic source ports and detination port is 9996. we cannot allow all source ports due to network security breaches.</P><P></P><P>Can anyone help me!!!</P><P></P><P>Regards,</P><P></P><P>Faisal Naseem Khan</P> Tue, 12 Mar 2019 02:27:45 GMT https://community.cisco.com/t5/network-security/netflow-analyzer/m-p/2337500#M344402 Faisal Khan 2019-03-12T02:27:45Z Netflow Analyzer https://community.cisco.com/t5/network-security/netflow-analyzer/m-p/2337501#M344403 <HTML><HEAD></HEAD><BODY><P>One more thing before ASA we are using router as a firewall at this time Netflow works fine.</P></BODY></HTML> Tue, 20 Aug 2013 06:35:03 GMT https://community.cisco.com/t5/network-security/netflow-analyzer/m-p/2337501#M344403 Faisal Khan 2013-08-20T06:35:03Z Netflow Analyzer https://community.cisco.com/t5/network-security/netflow-analyzer/m-p/2337502#M344404 <HTML><HEAD></HEAD><BODY><P>You inbound access-list should just specify the source and destination address and destination port (TCP 9996). You cannot specify source port for the reason you noted. </P><P></P><P>The way I suggested is the standard approach for allowing inbound traffic on an ASA.</P></BODY></HTML> Tue, 20 Aug 2013 12:43:57 GMT https://community.cisco.com/t5/network-security/netflow-analyzer/m-p/2337502#M344404 Marvin Rhoads 2013-08-20T12:43:57Z Netflow Analyzer https://community.cisco.com/t5/network-security/netflow-analyzer/m-p/2337503#M344407 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P>Thanks for replay,</P><P>i hv also create rule a soure ip XX.XX.XX.XX destination ip XX.XX.XX.XX destination port 9996 and source port any (any :1-65535).</P><P>But still not working.</P></BODY></HTML> Thu, 22 Aug 2013 12:45:34 GMT https://community.cisco.com/t5/network-security/netflow-analyzer/m-p/2337503#M344407 Faisal Khan 2013-08-22T12:45:34Z