Helo,
I have a question about NAT netflow:
We have problem with discovering which host from our internal network consume biggest part of traffic, in other words which devices on our network are making external requests.
Our edge router is ISR 4331, and regarding netflow, we have conversation between external addresses and our NAT public address and we do not see any internal address.
Behind the router we have firewall ,proxy and internal switch Cisco 9300 ( Flexibile netflow). On switch I have internal hosts on flow report ( there is conversation between proxy and hosts), but still can not see directly which host send request to specific external web address.
What else is need to have complete picture of NATed netflow?
Regards
