Link to home
Start Free TrialLog in
Avatar of leblanc
leblanc

asked on

netflow on ASA 5500 series

I have never configured netflow on the ASA and after my research, I see that you can configure netflow or NSEL. Are those the same thing? Is there any performance issue when implementing Netflow on the ASA? Any tips? Thanks
ASKER CERTIFIED SOLUTION
Avatar of Joey Yung
Joey Yung

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Here's a good sample config. I'm assuming you're sending the Flow data to a host outside your organization and that the name of your outside interface is "outside".

snmp-server host outside 1.1.1.1 community SNMPNAME version 2c
snmp-server location LOCATION-NAME
snmp-server enable traps all
!
flow-export destination outside 1.1.1.1 2055
flow-export template timeout-rate 1
flow-export delay flow-create 60
!
access-list netflow-export extended permit ip any any
!
class-map netflow-export-class
 match access-list netflow-export
!
policy-map global_policy
 class inspection_default
   inspect snmp
 class netflow-export-class
  flow-export event-type all destination 1.1.1.1