SonicOS 7.0 Device AppFlow
Configuring IPFIX (NetFlow Version 10)
To configure IPFIX, or NetFlow version 10, flow reporting
- Click Settings.
-
In the Settings section, for Report Connections, select one of these radio buttons:
- All (default).
- Interface-based: when enabled, the flows reported are based on the initiator or responder interface.
- Firewall/App Rules-based: when enabled, the flows reported are based on already existing firewall rules.
This step is optional, but is required if flow reporting is done on selected interfaces.
- Click External Collector.
-
Select Send Flows and Real-Time Data To External Collector.
When enabling this option, you might need to reboot the device to enable this feature completely.
- Select IPFIX as the External Flow Reporting Format from the drop-down menu.
- Specify the External Collector’s IP address in the provided field.
-
Optionally, for the Source IP to Use for Collector on a VPN Tunnel, specify the source IP if the external collector must be reached by a VPN tunnel.
This step is required if the external collector must be reached by a VPN tunnel.
- Specify the External Collector’s UDP port number in the provided field. The default port is 2055.
-
In Actions, click Generate ALL Templates to begin generating templates. A message requesting confirmation displays.
IPFIX uses templates that must be known to an external collector before sending data.
- After the templates have been generated, click Accept.
Was This Article Helpful?
Help us to improve our support portal