asa 5510 netflow

[jcatalino]

Hi Guys

Can you help me how to configure the netflow on asa 5510. 

[johnlloyd_13]

hi,

you can use the command:

flow-export destination <INTERFACE> <NETFLOW COLLECTOR IP> <NETFLOW UDP PORT>

find useful link:

https://supportforums.cisco.com/document/30471/netflow-asa

[Karsten Iwen]

In addition to the infos already posted, there is of course also the Configuration-Guide explaining it:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/monitor_nsel.html

[rizwanr74]

Hi Jcatalino,

Please follow the below configs.

access-list acl-netflow extended permit ip any any 

class-map class-my-netflow
 match access-list acl-netflow

policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map 
  inspect ftp 
  inspect h323 h225 
  inspect h323 ras 
  inspect rsh 
  inspect rtsp 
  inspect sqlnet 
  inspect skinny  
  inspect sunrpc 
  inspect xdmcp 
  inspect sip  
  inspect netbios 
  inspect tftp 
  inspect ip-options 
  inspect pptp 
 class class-my-netflow
  flow-export event-type all destination 192.168.0.1

You are done here, IP address 192.168.0.1 is your flow collector station.

Thanks

Rizwan Rafeek