configuration

Vyatta (VyOS)

Manufacturer:  Vyatta (VyOS) Model(s):   ALL Version(s):  Equuleus 1.3 URL:  https://docs.vyos.io/en/equuleus/configuration/system/flow-accounting.html Notes: VyOS supports flow-accounting for both IPv4 and IPv6 traffic. Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. For connectionless protocols as like ICMP and UDP, a flow is considered complete once no more packets for this …

Vyatta (VyOS) Read More »

VMware SD-WAN

Manufacturer:  VMware Model(s):  SD-WAN Version(s):  5.1 URL:  https://docs.vmware.com/en/VMware-SD-WAN/5.1/VMware-SD-WAN-Administration-Guide/GUID-6B05A10E-1056-4995-AB62-6621EBAA83C4.html Notes: VMware supports IPFIX version 10 to export IP flow information to a collector. Netflow records that are exported by SD-WAN Edge aggregate the source port. This means that data of different flows that have same source and destination IPs, same destination port, but different source ports …

VMware SD-WAN Read More »

StormShield

Manufacturer: STORMSHIELD Model(s): SN160(W), SN210(W), SN310, SN510, SN710, SN-M-Series-720, SN910, SN-M-Series-920, SN1100, SN2000, SN2100, SN3000, SN3100, SN6000, SN6100, SNi20, SNi40, SNxr1200, EVA1, EVA2, EVA3, EVA4 and EVAU. Version(s): v4.6.2 URL: https://documentation.stormshield.eu/SNS/v4/en/Content/User_Configuration_Manual_SNS_v4/Welcome/WELCOME.htm Configuration steps IPFIX is configured in the log section of the configuration.  The log configuration screen consists of 3 tabs: Local storageSyslogIPFIX Once in …

StormShield Read More »

SonicWall

Manufacturer: SonicWall Model(s): SonicWall TZ, NSa and NSsp Firewalls Version(s):  SonicOS 7 URL: https://www.sonicwall.com/support/technical-documentation/docs/sonicos-7-0-0-0-appflow_device/Content/appflow-d-flow-reporting-netflow-tables.htm Notes: Dell SonicWall AppFlow supports NetFlow Version 5, NetFlow Version 9, IPFIX, and IPFIX with Extensions. Configuration steps The Settings tab has configurable options for local internal flow reporting, AppFlow Server external flow reporting, and the IPFIX collector. Under the Settings section, enable …

SonicWall Read More »

Silver Peak

Manufacturer:  Silver Peak Model(s): Silver Peak Orchestrator Version(s): 8.8.1 URL:  https://www.silver-peak.com/sites/default/files/userdocs/orchestrator_operators_guide.pdf Notes:  Silver Peak SD-WAN appliances support IPFIX export only.  The appliance exports flows against two virtual interfaces — sp_lan and sp_wan — that accumulate the total of LAN–side and WAN–side traffic, regardless of physical interface.  These interfaces appear in SNMP and are therefore “discoverable” …

Silver Peak Read More »

Riverbed Steelhead

Manufacturer:  Riverbed Model(s):  Steelhead Version(s): 4.6 URL:  https://support.riverbed.com/bin/support/static/oc1r4qa2pks6172bsj6fte42p4/html/dhatalm0otkq7neeb7h9e9dl8j/sh_ex_4.6_ug/index.html#page/sh_ex_4.6_ug/setupAdvNet_netflow.html Notes:  SteelHead supports NetFlow v5.0, CascadeFlow, NetFlow v9, and CascadeFlow-compatible.  By default, flow export is disabled.  You can also export preoptimization and post-optimization data. Configuration steps Choose Networking > Network Services: Flow Statistics to display the Flow Statistics page (above). Under Flow Statistics Settings, complete the configuration …

Riverbed Steelhead Read More »

pfSense

Manufacturer:  pfSense Model(s):  pfSense Community Edition Version(s): 2.6.0-RELEASE (amd64) URL: https://docs.netgate.com/pfsense/en/latest/recipes/netflow-with-softflowd.html Notes: softflowd is a NetFlow collector that can be deployed on pfSense® software. There is a package available under System > Packages on the Available Packages tab. Find it in the list, click + at the end of its row, and confirm the installation. …

pfSense Read More »

Palo Alto Networks

Manufacturer:  Palo Alto Networks Model(s):  All Firewalls Version(s): PAN-OS 11.0 URL:  https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/monitoring/netflow-monitoring/configure-netflow-exports Notes: All Palo Alto Networks firewalls support NetFlow Version 9. The firewalls perform NetFlow processing on all IP packets on the interfaces and do not support sampled NetFlow. You can export NetFlow records for Layer 3, Layer 2, virtual wire, tap, VLAN, loopback, …

Palo Alto Networks Read More »

Open Vswitch

Manufacturer:  Open Vswitch Models: N/A Versions: N/A URL:  https://www.openvswitch.org/support/dist-docs-2.5/ovs-vsctl.8.html Notes: A NetFlow/IPFIX configuration attached to a bridge.  Records may be identified by the bridge’s name. The setup below shows the command to setup NetFlow and IPFIX for Open Vswitch. Configuration steps for NetFlow Configure bridge br0 to send NetFlow records to UDP port 2055  on  …

Open Vswitch Read More »

MikroTik

Manufacturer:  MikroTik Model(s):  All Version(s): RouterOS: v4+ URL: https://help.mikrotik.com/docs/display/ROS/Traffic+Flow Notes: Traffic-Flow supports the following NetFlow formats: version 1– the first version of NetFlow data format, do not use it version 5– in addition to version 1, version 5 has the possibility to include BGP AS and flow sequence number information. Currently RouterOS does not include BGP …

MikroTik Read More »