Netflow Export with Physical Ip in cluster environment

Warren_T — Tue, 08 Jul 2025 10:51:42 GMT

Hi Team,

I have configured the Nonflow Export on Check Point firewall and it is Cluster environment. The traffic is sending out with Virtual IP and as per SolarWinds team who collects the logs they need the Physical IP of the firewall. So is it possible to forward it from the Physical IP.I have added the physical IP in Source IP field but the traffic is going from Virtual IP?

Let me know if it is possible and How?

Re: Netflow Export with Physical Ip in cluster environment

PhoneBoy — Tue, 08 Jul 2025 14:41:02 GMT

By default, the gateway will hide all traffic behind the VIP.
You can override this by creating a NO NAT rule for the relevant source/destination (i.e. the translated source and destination say "Original").
See also: https://support.checkpoint.com/results/sk/sk156494

topic Netflow Export with Physical Ip in cluster environment in General Topics

Netflow Export with Physical Ip in cluster environment

Re: Netflow Export with Physical Ip in cluster environment