SonicOS 7.0 Device AppFlow

Configuring IPFIX (NetFlow Version 10)

To configure IPFIX, or NetFlow version 10, flow reporting

  1. Click Settings.
  2. In the Settings section, for Report Connections, select one of these radio buttons:

    • All (default).
    • Interface-based: when enabled, the flows reported are based on the initiator or responder interface.
    • Firewall/App Rules-based: when enabled, the flows reported are based on already existing firewall rules.

    This step is optional, but is required if flow reporting is done on selected interfaces.

  3. Click External Collector.
  4. Select Send Flows and Real-Time Data To External Collector.

    When enabling this option, you might need to reboot the device to enable this feature completely.

  5. Select IPFIX as the External Flow Reporting Format from the drop-down menu.
  6. Specify the External Collector’s IP address in the provided field.
  7. Optionally, for the Source IP to Use for Collector on a VPN Tunnel, specify the source IP if the external collector must be reached by a VPN tunnel.

    This step is required if the external collector must be reached by a VPN tunnel.

  8. Specify the External Collector’s UDP port number in the provided field. The default port is 2055.
  9. In Actions, click Generate ALL Templates to begin generating templates. A message requesting confirmation displays.

    IPFIX uses templates that must be known to an external collector before sending data.

  10. After the templates have been generated, click Accept.

Was This Article Helpful?

Help us to improve our support portal

Techdocs Article Helpful form

  • Hidden
  • Hidden

Techdocs Article NOT Helpful form

  • Still can't find what you're looking for? Try our knowledge base or ask our community for more help.
  • Hidden
  • Hidden