Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Contributor

IPFIX vs Netflow

Jump to solution

Which is recommended for Check Point? 

 

Also, how memory/CPU intensive is it? 

 

Any difference for VSX and non-VSX?

0 Kudos
Reply
1 Solution

Accepted Solutions
Admin
Admin
The reason we support IPFIX and Netflow v5/v9 is because different customers have different collectors.
From a Check Point perspective, there isn't a specific recommendation to use one over the other as it's all provided from the same infrastructure.
The CPU overhead of either choice is fairly minimal.
VSX is definitely supported in R80.x releases and the VS # is communicated in the various records.
See also: https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainAction&eve...

View solution in original post

0 Kudos
Reply
2 Replies
Admin
Admin
The reason we support IPFIX and Netflow v5/v9 is because different customers have different collectors.
From a Check Point perspective, there isn't a specific recommendation to use one over the other as it's all provided from the same infrastructure.
The CPU overhead of either choice is fairly minimal.
VSX is definitely supported in R80.x releases and the VS # is communicated in the various records.
See also: https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainAction&eve...

View solution in original post

0 Kudos
Reply
Contributor

Do you know what the default active flow timeout is on Check Point firewalls for IPFIX? I didn't see it in the setup document on sk102041.

0 Kudos
Reply