topic Re: Netflow & 3200 Series in General Topics

Netflow & 3200 Series

jeff6strings — Tue, 01 Mar 2022 13:29:55 GMT

We need clarification if our 3260 firewall requires an L3 interface for Netflow exports. The link below, "HOW TO VERIFY AND TROUBLESHOOT NETFLOW," states a 3200 series cannot use the mgmt interface, but I can't find any other sources that state the mgmt interface cannot be used.

Also, to confirm, do we need a separate Netflow profile for each of the L3 sub-interfaces on the 3260 (link below)?
Thank you.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008UuYCAU

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClzyCAC

Re: Netflow & 3200 Series

BPry — Tue, 01 Mar 2022 15:49:57 GMT

@jeff6strings,

A netflow profile can be assigned to multiple interfaces without any issue. The article that you linked does a poor job of communicating what it's attempting to, but you need to assign the netflow profile to any logical interface you want to receive netflow information from. The assigned netflow profile itself however can be linked to the physical interface in addition to all of the logical sub-interfaces without issue, you don't need a new netflow profile for every assigned logical interface.

Assuming that it follows the 5200 and 7000 series, the 3200 can't pass netflow interface across the MGMT interface. You need to configure a service route through a dataplane interface as mentioned in the document.

Re: Netflow & 3200 Series

jeff6strings — Tue, 01 Mar 2022 20:00:44 GMT

It sounded odd to have a profile for each interface and not share the same one.

Thank you for confirming the 3200 series Netflow question.

Jeff