NetFlow & PIX Firewalls

[zeu7]

Can anybody tell me if its possible to configure NetFlow on a PIX firewall, and if so how.

[mskumar_apk]

Hi,

Netflow is not supported in CiscoPIX but syslog is. If you want to analyze the traffic that is going through firewall, you can use firewall log analyzers.

regards,

MSK

[jshelmer]

Are there any good recommendations for ASA log analyzers?

[mskumar_apk]

Try ManageEngine Firewall Analyzer at http://www.fwanalyzer.com

[jakewilson]

Some of the most extensive NetFlow (NSEL) support for the ASA is found in Scrutinizer.  It can break down the flows by template, category, etc. It can also report on denied flows and provide the ACLs seeing the most matches.