How to Configure Netflow Server Profile and Assign to Interface

by achalla on ‎07-10-2014 12:56 PM - edited on ‎01-03-2017 06:50 AM by (8,743 Views)

Steps

The following steps describe how to configure the Netflow Server Profile:

  1. Go to Device > Server Profiles > Netflow
  2. Click Add to bring up the Netflow Server Profile
  3. Add a Name for the Netflow settings
  4. Click Add and fill the Name (name to identify the server) and Server (host name or IP address of the server) field
  5. The port is automatically populated as 2055, but can be edited if needed, as shown below:

 

The profile can be assigned to an existing Palo Alto Networks firewall interface, so that all traffic flowing over that interface is exported to the specified server above.

 

To assign the profile created above to the interface, follow the steps below:

  1. Click on Network > Interfaces, go to either Ethernet, VLAN, Loopback or Tunnel tabs
  2. Select any interface and assign the above created Netflow Server Profile ( Netflow_Profile1) in the Netflow Profile field:

 

Commit changes

 

Note :

 

PAN-OS 6.0 and after:

NetFlow works with logical sub-interface and can be exported directly.

 

Prior to PAN-OS 6.0:

NetFlow data cannot be exported on a per-subinterface basis. Data can only be exported using physical ingress and egress interface numbers.

 

owner: achalla

Ask Questions Get Answers Join the Live Community
Contributors