Cisco ASA 5525-x netflow error

[rajeev_22]

Hi, I have configured netflow on cisco ASA 5525-x(IOS 8.6). It is giving an error on ASDM.Please see below:

"Report may show inaccurate results due to cisco NSEL results not identifying flow direction.

Please upgrade your device IOS to version 8.4.5 or later."

Our device already functioning with IOS 8.6.

please see the attachment for this error.

Thanks and Regards

Rajeev

[Julio Carvajal]

Hello Rajeev,

That happens because 8.6 source code comes from 8.4.1 (not 100 % sure if it's 8.4.1 or 8.4.2) so ofcourse a version higher than 8.4.5 will present changes to the code not available on 8.6.

Do you understand what I mean?

Regards

Jcarvaja

[jakewilson]

I'm not aware of a flow direction problem with the ASA export.  There is a bi-flow issue as well as an active timeout problem depending on the version of firmware running on the ASA. This plixer post should help you understand what is happening with the different ASA firmware versions.  We are working with Cisco to try and get this resolved.