Today, I will be talking about the Cisco Zone-Based Firewall, including their differences and advantages compared to a Cisco ASA. I will also walk through the configuration steps, showing how to turn NetFlow on and start getting these awesome Zone Pair and Class reports! What is a Zone-Based Firewall? The Cisco Zone-Based Firewall is the …
Monitor Pokemon Go Network Traffic So there I am monitoring my network with NetFlow and a wild application appears! Pokemon GO hit the scene last week and it’s quickly becoming one of the most popular applications to hit networks. Most network professionals are interested in seeing what applications are in their environment and who is using …
EDIT 5/30/18: There is a newer version of this article available. In order to configure Cisco ISE NetFlow, we’re going to take advantage of Scrutinizer’s API (Application Program Interface) by enabling ERS (External RESTful Services), on the ISE appliance. You probably already know about Cisco ISE (Identity Service Engine) profiling using the NetFlow Probe. However, …
Last week I was working with a customer who needed help with a Cisco NGA Configuration (NetFlow Generation Appliance). The customer was running the Cisco NGA 3140 (NGA3140-K9) model and had questions with how to setup version 5 versus version 9 NetFlow. In this blog I will take a look at steps needed to setup …
Cisco UCS Netflow Support was recently added with the release of version 2.2(2c). NetFlow exports can be configured either in the GUI or the CLI. The configuration is somewhat different from the typical Flexible NetFlow configuration. In this blog we will take a look at the CLI configuration method and some of the different aspects of …
We recently upgraded a few of our Cisco IOS routers to version 15.4(2)T and enabled zone-based firewall logging, which allowed us to export firewall logs in NetFlow! Check out the rest of the blog on what event types Cisco supports and an example configuration!
Often these days, we’re asked for a general rule of thumb or guidelines that can help with calculating NetFlow Volume. How much disk space should an average NetFlow Deployment consume. One of the biggest concerns is that exporting NetFlow (or one of its cousins) for Network Performance Analysis will have a drastic impact on the …
The cutting edge Cisco 7600 Series is an edge router that delivers robust, high performance IP/MPLS features for service provider and enterprise WAN/MAN applications. There are some common Cisco 7600 NetFlow problems that you should be aware of when enabling Cisco 7600 NetFlow exports.
Today I will show you how to configure PfSense NetFlow export on one of the more popular open source firewalls. It is a great firewall that includes a long list of related features, as well as a package system that allows for further expandability. One of the many packages available is pfflowd, which converts OpenBSD …
Let’s talk about NetFlow observation point in Cisco NetFlow capable devices, particularly the octetDeltaCount collection. Ingress and egress Netflow are probably notions we are the most familiar with. However, what exactly is Ingress or Egress NetFlow? At what point were bandwidth utilization values in my NetFlow report metered?