Netflow and FWSM
Hello GS
We are evaluating LANCOPE net flow analysis started with Cisco 6513 Core Switch. All VLANS SVIs has been configured in the FWSM.
Netflow is not supported in FWSM.
Are there any updates to this or any word around to this limitation?
Thank you in advanced.
_________________________________________________________________ Hotmail: Trusted email with Microsofts powerful SPAM protection. https://signup.live.com/signup.aspx?id=60969
Blogs and organic groups at http://www.ccie.net
_______________________________________________________________________ Subscription information may be found at: http://www.groupstudy.com/list/CCIELab.html
Hi Fadel,
Lancope, a great product!
The FWSM doesnt support netflow afaik, perhaps you can ask someone from lancope for a native capture (NC) box instead of a netflow box which would help.
hope this helps!
Why do you need to do Netflow on the FWSM when it is supported on the 6500? I guess I am not sure how the traffic would look different if you capture it from the 6500 or the FWSM.
The ASA as of version 8.2 supports NSEL but I am not sure this would be ported to the FWSM as there is already a reliable resource on the 6500 to capture that information.
Regards,
Tyson Scott – CCIE #13513 R&S, Security, and SP Technical Instructor – IPexpert, Inc. Mailto: tscott@ipexpert.com Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: http://www.ipexpert.com/chat eFax: +1.810.454.0130
Hi Wouter
Thank you for your reply,
We will use Lancope flowsensor (AE) for devices that does not support Netflow or Sflow, and FWSM defiantly will be one of them.
Fadel J.
href=”mailto:wp@null0.nl”>wp@null0.nl href=”mailto:fadellubbos@hotmail.com”>fadellubbos@hotmail.com href=”mailto:ccielab@groupstudy.com”>ccielab@groupstudy.com href=”mailto:wp@null0.nl”>wp@null0.nl
_________________________________________________________________ Hotmail: Trusted email with powerful SPAM protection. https://signup.live.com/signup.aspx?id=60969
Blogs and organic groups at http://www.ccie.net
_______________________________________________________________________ Subscription information may be found at: http://www.groupstudy.com/list/CCIELab.html
Hi Tyson
All VLANS routing (SVIs) has been configured in the FWSM and for that we cannot do layer 3 netflow in the 6513 Switch. We are going to use Lancope FlowSensor in our case for FWSM. Thank you,
Fadel J.
href=”mailto:tscott@ipexpert.com”>tscott@ipexpert.com href=”mailto:fadellubbos@hotmail.com”>fadellubbos@hotmail.com; ccielab@groupstudy.com it href=”mailto:tscott@ipexpert.com”>tscott@ipexpert.com href=”mailto:nobody@groupstudy.com”>nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
_________________________________________________________________ Hotmail: Powerful Free email with security by Microsoft. https://signup.live.com/signup.aspx?id=60969
Blogs and organic groups at http://www.ccie.net
_______________________________________________________________________ Subscription information may be found at: http://www.groupstudy.com/list/CCIELab.html
Netflow version 9 supports Layer2. Not sure to what detail. Have you looked at that?
Charles Henson
|————> | From: | |————> |Fadel Lubbos | |————> | To: | |————> |, CCIE Group Study CCIE Group Study | |————> | Date: | |————> |03/31/2010 10:34 AM | |————> | Subject: | |————> |RE: Netflow and FWSM |
Hi Tyson
All VLANS routing (SVIs) has been configured in the FWSM and for that we cannot do layer 3 netflow in the 6513 Switch. We are going to use Lancope FlowSensor in our case for FWSM. Thank you,
Fadel J.
href=”mailto:tscott@ipexpert.com”>tscott@ipexpert.com href=”mailto:fadellubbos@hotmail.com”>fadellubbos@hotmail.com; ccielab@groupstudy.com 6500? it href=”mailto:tscott@ipexpert.com”>tscott@ipexpert.com href=”mailto:nobody@groupstudy.com”>nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
_________________________________________________________________ Hotmail: Powerful Free email with security by Microsoft. https://signup.live.com/signup.aspx?id=60969
Blogs and organic groups at http://www.ccie.net
_______________________________________________________________________ Subscription information may be found at: http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
_______________________________________________________________________ Subscription information may be found at: http://www.groupstudy.com/list/CCIELab.html