Advanced Mode

Advanced Configuration mode allows to specify select more than one AppFlow Agent and then set how the flows are directed or balanced between the servers.

Establishing a connection is a two-step process:

1. Establish a connection to the AppFlow Agent.

2. Configure the AppFlow Agent on the DEVICE | AppFlow > Flow Reporting page.

   For more detailed information about configuring an AppFlow server with GMS, refer to the latest SonicWallGMS or SonicWall Management Services administration documentation, available at Technical Documentation portal.

To establish a connection to a AppFlow Agent

1. In GMS, log in to the Instant AppFlow Agentr.
2. Go to the Network > Settings page.
3. Find and copy the Host IP address of the AppFlow Agent.

On the SonicWall network security appliance

1. Navigate to the DEVICE | AppFlow > AppFlow Agent page.
2. For the AppFlow Agent Configuration Mode, choose Advanced.

3. Set the Advanced Flow Server Config Mode.

   • ActiveStandby — If you select this option, flows are directed first to AppFlow Agent 1 (if available). If AppFlow Agent 1 is not available, flows are directed to the AppFlow Agent 2 (if available). (This is the default setting.)
   • Load Balancing — If you select this option, you can choose between these load-balancing configurations:
     • Share-Load — If both flow servers are available, the flows are divided equally between the two flow servers.
     • Mirror — If you select this load-balancing option, all flows are sent to both flow servers.

4. In the AppFlow Agent Address fields, either:

   • Paste the Host IP address you copied from the AppFlow Agent.
   • Select a predefined address object from the AddrObj drop-down menu. You can also create a new address object by choosing Create new address object.

5. In the Source IP to Use for Collector on a VPN Tunnel field for each AppFlow Agent, specify the source IP address for the applicable VPN policy.

   If the AppFlow Agent is reachable through a VPN tunnel, then this field must be specified. You can choose an IP from the VPN policy.

6. In the Server Communication Timeout field for each AppFlow Agent, enter the number of seconds that the firewall waits to receive a response from the Flow Server. The range is 60 (default) to 120 seconds.
7. If you want to enable the firewall to send static flows to a Flow Server each time the firewall is rebooted, select the Auto-Synchronize Flow Server option for that AppFlow Agent.
8. To test your connection to a AppFlow Agent, click Test Connectivity for that AppFlow Agent. The connectivity status is displayed.

9. If you want to manually send static data to an AppFlow Agent, click Synchronize Server for that AppFlow Agent. The synchronicity status is displayed.

   You must click Synchronize Server once, and once only, after connecting to and registering your SonicWall GMS product.

10. Click Accept.