Comments on: How to configure ASA/PIX firewall to collect Net flow data from an external router to the netflow collector located in Inside Network. http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-asapix-firewall-to-collect-net-flow-data-from-an-external-router-to-the-netflow-collector-located-in-inside-network/ Mon, 09 Nov 2009 00:13:45 +0000 http://wordpress.org/?v=2.6.2 By: Greenguy97 http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-asapix-firewall-to-collect-net-flow-data-from-an-external-router-to-the-netflow-collector-located-in-inside-network/#comment-33 Greenguy97 Fri, 04 Sep 2009 14:27:59 +0000 http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-asapix-firewall-to-collect-net-flow-data-from-an-external-router-to-the-netflow-collector-located-in-inside-network/#comment-33 Plixer has a [A href="http://www.plixer.com/products/netflow-sflow/free-netflow-scrutinizer.php"]free NetFlow analyzer[/A] called Scrutinizer that supports NetFlow from the ASA, in addition to just NSEL. They even posted a video on their community site showing [A href="http://www.systrax.com/webcasts.php"]how to monitor NetFlow from ASA hardware[/A]. Plixer has a free NetFlow analyzer called Scrutinizer that supports NetFlow from the ASA, in addition to just NSEL.

They even posted a video on their community site showing how to monitor NetFlow from ASA hardware.

]]> By: Yasirirfan http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-asapix-firewall-to-collect-net-flow-data-from-an-external-router-to-the-netflow-collector-located-in-inside-network/#comment-8 Yasirirfan Tue, 09 Sep 2008 09:32:38 +0000 http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-asapix-firewall-to-collect-net-flow-data-from-an-external-router-to-the-netflow-collector-located-in-inside-network/#comment-8 Also we can remove the following access-list access-list NETFLOW extended permit tcp any any no access-list NETFLOW extended permit tcp any any Also we can remove the following access-list
access-list NETFLOW extended permit tcp any any

no access-list NETFLOW extended permit tcp any any

]]> By: Yasirirfan http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-asapix-firewall-to-collect-net-flow-data-from-an-external-router-to-the-netflow-collector-located-in-inside-network/#comment-7 Yasirirfan Tue, 09 Sep 2008 09:31:28 +0000 http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-asapix-firewall-to-collect-net-flow-data-from-an-external-router-to-the-netflow-collector-located-in-inside-network/#comment-7 it can be modified with an the source IP with the specific port number with following accesslist access-list NETFLOW extended permit udp host 192.168.1.1 host 192.168.1.5 eq 9996 it can be modified with an the source IP with the specific port number with following accesslist

access-list NETFLOW extended permit udp host 192.168.1.1 host 192.168.1.5 eq 9996

]]> By: Yasirirfan http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-asapix-firewall-to-collect-net-flow-data-from-an-external-router-to-the-netflow-collector-located-in-inside-network/#comment-6 Yasirirfan Tue, 09 Sep 2008 09:30:35 +0000 http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-asapix-firewall-to-collect-net-flow-data-from-an-external-router-to-the-netflow-collector-located-in-inside-network/#comment-6 it can be modified with an the source IP with the specific port number with following accesslist access-list NETFLOW extended permit udp host 192.168.1.1 host 192.168.1.5 it can be modified with an the source IP with the specific port number with following accesslist

access-list NETFLOW extended permit udp host 192.168.1.1 host 192.168.1.5

]]> By: Capnjack http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-asapix-firewall-to-collect-net-flow-data-from-an-external-router-to-the-netflow-collector-located-in-inside-network/#comment-5 Capnjack Tue, 09 Sep 2008 07:17:25 +0000 http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-asapix-firewall-to-collect-net-flow-data-from-an-external-router-to-the-netflow-collector-located-in-inside-network/#comment-5 What's the reasoning behind the "access-list NETFLOW extended permit tcp any any" in the ACL? Kind of begs the question, "Why have a firewall?" right? Is there anything necessary other than the one UDP port sourcing from the external router? Thanks, Chaz What’s the reasoning behind the “access-list NETFLOW extended permit tcp any any” in the ACL? Kind of begs the question, “Why have a firewall?” right? Is there anything necessary other than the one UDP port sourcing from the external router?

Thanks,
Chaz

]]>