Netflow Export with Physical Ip in cluster environment

[Warren_T]

Hi Team,

I have configured the Nonflow Export on Check Point firewall and it is Cluster environment. The traffic is sending out with Virtual IP and as per SolarWinds team who collects the logs they need the Physical IP of the firewall. So is it possible to forward it from the Physical IP.I have added the physical IP in Source IP field but the traffic is going from Virtual IP?

Let me know if it is possible and How?

[PhoneBoy]

By default, the gateway will hide all traffic behind the VIP.
You can override this by creating a NO NAT rule for the relevant source/destination (i.e. the translated source and destination say "Original").
See also: https://support.checkpoint.com/results/sk/sk156494