topic Re: IPS netflow analyzer in Network Security https://community.cisco.com/t5/network-security/ips-netflow-analyzer/m-p/1335244#M68434 <HTML><HEAD></HEAD><BODY><P>As I know Cisco IPS doesn't work with netflow.</P><P>As an alternative you may create custom signatures for established TCP sessions and UDP packets exchange, but it will generate a lot of events on your alarm panel. You can export this information via SNMP-traps for any monitoring system.</P></BODY></HTML> Mon, 19 Oct 2009 05:37:43 GMT andrey.dugin 2009-10-19T05:37:43Z IPS netflow analyzer https://community.cisco.com/t5/network-security/ips-netflow-analyzer/m-p/1335243#M68431 <P>Hi All, </P><P>we have IPS 4240 with MARS 25. I like to export netflow from IPS to the MARS for anomaly detection. But I couldn't find any document to show how to configure netflow analyzer in IPS to export to MARS. if you show me any documents, I would be very appreciated. </P><P>thanks </P><P>Alex</P><P></P> Sun, 10 Mar 2019 11:47:57 GMT https://community.cisco.com/t5/network-security/ips-netflow-analyzer/m-p/1335243#M68431 alex goshtaei 2019-03-10T11:47:57Z Re: IPS netflow analyzer https://community.cisco.com/t5/network-security/ips-netflow-analyzer/m-p/1335244#M68434 <HTML><HEAD></HEAD><BODY><P>As I know Cisco IPS doesn't work with netflow.</P><P>As an alternative you may create custom signatures for established TCP sessions and UDP packets exchange, but it will generate a lot of events on your alarm panel. You can export this information via SNMP-traps for any monitoring system.</P></BODY></HTML> Mon, 19 Oct 2009 05:37:43 GMT https://community.cisco.com/t5/network-security/ips-netflow-analyzer/m-p/1335244#M68434 andrey.dugin 2009-10-19T05:37:43Z