topic Does anyone know what the netflow sample rate is on PA5000 series? Is it 1 to 1 or 1 to 50? in General Topics https://live.paloaltonetworks.com/t5/general-topics/does-anyone-know-what-the-netflow-sample-rate-is-on-pa5000/m-p/6076#M4412 <HTML><HEAD></HEAD><BODY><P>We are sending netflow traffic to our SIEM and wanted to know is what the sample rate if there is one on our 5060s.&nbsp; We have to gage our SIEM retention based on flows per second.&nbsp; We are putting in more 5060s and trying to figure out how much netflow traffic would be sent there.</P></BODY></HTML> Thu, 25 Jul 2013 14:35:52 GMT atorrado 2013-07-25T14:35:52Z Does anyone know what the netflow sample rate is on PA5000 series? Is it 1 to 1 or 1 to 50? https://live.paloaltonetworks.com/t5/general-topics/does-anyone-know-what-the-netflow-sample-rate-is-on-pa5000/m-p/6076#M4412 <HTML><HEAD></HEAD><BODY><P>We are sending netflow traffic to our SIEM and wanted to know is what the sample rate if there is one on our 5060s.&nbsp; We have to gage our SIEM retention based on flows per second.&nbsp; We are putting in more 5060s and trying to figure out how much netflow traffic would be sent there.</P></BODY></HTML> Thu, 25 Jul 2013 14:35:52 GMT https://live.paloaltonetworks.com/t5/general-topics/does-anyone-know-what-the-netflow-sample-rate-is-on-pa5000/m-p/6076#M4412 atorrado 2013-07-25T14:35:52Z Re: Does anyone know what the netflow sample rate is on PA5000 series? Is it 1 to 1 or 1 to 50? https://live.paloaltonetworks.com/t5/general-topics/does-anyone-know-what-the-netflow-sample-rate-is-on-pa5000/m-p/6077#M4413 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-size: 10pt; line-height: 1.5em;">I </SPAN><SPAN style="font-size: 10pt; line-height: 1.5em;">don't</SPAN><SPAN style="font-size: 10pt; line-height: 1.5em;"> think PA firewalls support sampling rate for Netflow .</SPAN></P><P>Sampling Rate was a introduced by Cisco and is also configurable on Juniper Firewalls.</P><P><SPAN style="font-size: 10pt; line-height: 1.5em;"><BR /></SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;">Following configurable factors govern how/when the Netflow records are exported to the Netflow Collector:</SPAN></P><P></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;">#Template Refresh Rate:</SPAN></P><P>Minutes : No.&nbsp; of packets after which the Netflow template is refreshed . (default 30 min,range 1-3600)</P><P>OR </P><P>Packets : No.&nbsp; of packets after which the Netflow template is refreshed. ( default 20 ,range 1-600)</P><P><SPAN style="font-size: 10pt; line-height: 1.5em;"><BR /></SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;">#Active</SPAN><SPAN style="font-size: 10pt; line-height: 1.5em;"> Timeout</SPAN></P><P>Frequency at which data records are exported for each session (minutes).(Def-5 max 60)</P><P></P><P></P><P>Netflow stats can be viewed from the CLI using the following CLI command:</P><P>&gt;debug log-receiver netflow statistics</P><P></P><P></P><P>HTH</P></BODY></HTML> Fri, 26 Jul 2013 05:50:28 GMT https://live.paloaltonetworks.com/t5/general-topics/does-anyone-know-what-the-netflow-sample-rate-is-on-pa5000/m-p/6077#M4413 UhMayYeah 2013-07-26T05:50:28Z