Filter
Top Products
Log > Flow Reporting
1377
SonicOS 5.8.1 Administrator Guide
User Configuration Tasks
Depending on the type of flows you are collecting, you will need to determine which type of
reporting will work best with your setup and configuration. This section includes configuration
examples for each supported NetFlow solution, as well as a section on viewing reports in
Scrutinizer.
• “NetFlow Version 5 Configuration Procedures” section on page 1377
• “NetFlow Version 9 Configuration Procedures” section on page 1377
• “IPFIX (NetFlow version 10) Configuration Procedures” section on page 1378
• “IPFIX with Extensions Configuration Procedures” section on page 1379
• “Viewing IPFIX with Extensions Reports With Scrutinizer” section on page 1380
NetFlow Version 5 Configuration Procedures
To configure typical Netflow version 5 flow reporting, follow the steps listed below.
Step 1 In Settings, select the checkbox to Enable AppFlow To Local Collector.
Step 2 In External Collector Settings, select the Send AppFlow and Real-Time Data To EXTERNAL
Collector checkbox to enable flows to be reported to an external flow collector. Remember, not
all collectors will work with all modes of flow reporting.
Step 3 Select Netflow version-5 from the External Flow Reporting Format drop-down list.
Step 4 Specify the External Collector’s IP address in the provided field.
Step 5 For the Source IP to Use For Collector on a VPN tunnel, specify the source IP if the external
collector must be reached by a VPN tunnel. Note that this step is optional.
Step 6 Specify the External Collector’s UDP port number in the provided field. The default port is
2055.
Step 7 In Connection Report Settings, for Report Connections, do one of the following:
• Select All to report all flows.
• Select the INTERFACE-based option. Once enabled, the flows reported are based on the
initiator or responder interface.
• Select the Firewall/App Rules-based option. Once enabled, the flows reported are based
on already existing firewall rules.
Note The above fields are the required fields for successful Netflow version 5 configuration. All
other configurable fields are optional.
NetFlow Version 9 Configuration Procedures
To configure Netflow version 9 flow reporting, follow the steps listed below.
Step 1 In Settings, select the checkbox to Enable AppFlow To Local Collector.
Step 2 In External Collector Settings, select the Send AppFlow and Real-Time Data To EXTERNAL
Collector checkbox to enable flows to be reported to an external flow collector. Remember, not
all collectors will work with all modes of flow reporting.