NAT issue on ASA - PRTG

[yong khang NG]

Hi Forumers'

would like to consult any thing that i need to do on my current design in order:

(1) PRTG network monitoring software can read ASA netflow traffic from public network?

(2) what need to tweak?

tahnk you

Noel

[Don Jacob]

Hi,

I believe the below discussion from PRTG should cover most of it:

http://www.paessler.com/knowledgebase/en/topic/1423-how-to-monitor-cisco-asa-firewalls-using-netflow-9-and-prtg

Regards,

Don Thomas

ManageEngine - NetFlow

[yong khang NG]

hi jacob,

thanks for the URL, i manage to do the configuration according to the content shown, somehow i wondering

a. firewall (at public) cannot PING to the PRTG server (at private)

b. what NAT should be done on the router, or firewall?

thanks

Noel

[Don Jacob]

Hi Noel,

I think youi need to map the private IP to the public IP. Please check the below blog:

https://blogs.manageengine.com/netflowanalyzer/2009/04/06/nat-configuration-for-netflow

Should  give you an idea on what needs to be done to export NetFlow packets  from external devices to the NetFlow server when  a firewall is present.  Hope that helps.

Regards,

Don Thomas

ManageEngine - NetFlow