There are two Cisco ASA NetFlow configuration methods; you can setup NetFlow on the Cisco ASA from command line or you can setup NetFlow on ASA using the ASDM. If you have a Cisco ASA then it’s time to start exporting NetFlow to your favorite NetFlow and IPFIX traffic analysis tool, here’s how!
The ASA is Cisco’s firewall that exports NetFlow (NSEL). You’ll want to make sure you’re running version 8.2(2) or newer for NetFlow exports.
Cisco ASA NetFlow Configuration: Command Line
Our Product Manager, Michael Patterson, has written a great guide on how to configure NetFlow on the ASA from command line.
Cisco ASA NetFlow Configuration: ASDM
If you would prefer to stay away from the command line, you can setup Cisco ASA NetFlow Configuration using ASDM, which is the ASA’s graphical user interface.
Now that your Cisco ASA NetFlow config is setup, you should read about how NetFlow Analysis on the Cisco ASA is different from traditional NetFlow. We love to have feedback from our customers, so let us know how Cisco ASA NetFlow traffic analysis helped you solve problems on your network?
May 29th, 2012 Cisco ASA UPDATE: New Cisco NSEL Reports in Scrutinizer v9. Check them out.