cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
B_P
Nickel

R80.30 Netflow Setup

Pre R80.10 Netflow worked fine.

Now on R80.30 I have two flows that are identical -- but one only shows Outbound and the other only shows Inbound BUT -- and this is perplexing -- it is the exact same traffic for both inbound and outbound flows -- i.e. source and destination are the same.

Yes.. let that simmer for a while.

I have one rule that's configured on the firewall and it's a rule that a lot of web traffic hits on.

I'm using ManageEngine's Netflow Analyzer.

For this traffic, I would expect there should be one flow and it should include both inbound and outbound traffic on the one interface (the internal interface it's hitting).

0 Kudos
8 Replies
Employee+
Employee+

Re: R80.30 Netflow Setup

Hi,

 

Is your rule contain Accounting? if not please add it and re-check since in R80.30 to see netflow you need to enable accounting on the rule.

 

Thansk,

Ilya 

0 Kudos
B_P
Nickel

Re: R80.30 Netflow Setup

@Ilya_Yusupov -- would I be receiving any netflows if it did not already include accounting?
0 Kudos
Employee+
Employee+

Re: R80.30 Netflow Setup

Depends on your RB, might be you have APPI layer which Accounting is enabled so you are getting info on this one.

0 Kudos
Highlighted
B_P
Nickel

Re: R80.30 Netflow Setup

No, we have one unified policy (layered).

0 Kudos
B_P
Nickel

Re: R80.30 Netflow Setup

bump

0 Kudos
Employee+
Employee+

Re: R80.30 Netflow Setup

Is the traffic NATED? i tried to see in my lab if i replicate the issue, currently without any success.

 

 

0 Kudos
B_P
Nickel

Re: R80.30 Netflow Setup

Yes, it is NAT'd.. outbound.

0 Kudos
B_P
Nickel

Re: R80.30 Netflow Setup

Bump

0 Kudos