Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

NetFlow Traffic Analyzer (NTA) for Fortinet FortiGate 60D and Fortinet FortiGate 40C

We are using Solarwinds Orion Platform 2015.1.2, NPM 11.5.2 to monitor our network of Fortinet FortiGate 60D and Fortinet FortiGate 40C devices. The issue is that we can’t monitor traffic fallow nor Hardware monitoring for any node.

Is there any way to monitor net traffic flow of mention above in NPM 11.5.2 i.e Fortinet 60D / Fortinet 40C??

Jawwad~

Find more posts tagged with

nta fortinet fortigate 60d and fortinet fortigate 40c

Accepted answers

rharland2012

Yes, it is possible.

You'll have to enable netflow in the CLI, define your collector node (NTA box), and enable per-interface.

Taken from Fortinet KB:

Configuring the Netflow collector IP:

config system netflow
set collector-ip <ipv4_addr>
set collector-port <port_int>
end

Enabling Netflow on the Interface:

config system interface
edit <interface name>
set netflow-sampler both
end

All comments

rharland2012

Yes, it is possible.

You'll have to enable netflow in the CLI, define your collector node (NTA box), and enable per-interface.

Taken from Fortinet KB:

Configuring the Netflow collector IP:

config system netflow
set collector-ip <ipv4_addr>
set collector-port <port_int>
end

Enabling Netflow on the Interface:

config system interface
edit <interface name>
set netflow-sampler both
end

jawwad05

Many Thanks

Fortinet Knowledge Base - View Document

rharland2012

No problem at all - if you're still having issues polling for hardware health/etc., just make sure the interface you're talking to via SNMP has SNMP access enabled in the GUI. You find this in the Network>Interfaces menu via GUI.

cnorborg

Hmmm... We've had problems getting actual usage out of Fortinets using Netflow. When I opened a ticket with them about this in Dec 2015, the response I got was below. This was after a couple weeks of being persistent with them about the traffic I was seeing being wrong. There aren't many systems, esp. low end, that use the NP6 processor BTW. Good luck!

"Notice that the netflow for offloaded traffic may be only support on architectures using NP6. So, when using Netflow it will disable the offloading for the interface, which may affect you performance.

Also, for encrypted traffic you may not see all the information about the flow, since the traffic is actually encrypted.

If you want to account bandwidth usage, the SNMP may be a better option for you. "

rharland2012

Weird...I haven't seen that issue. Sorry to hear you're having problems - kind of a drag.

cnorborg

Well, if the appliances you have either have an NP6 or are set up in a very specific way, then it will probably work. But I was noticing that far less traffic was being classified than was actually transiting the interface. The device on the other end supported Netflow, so it was pretty apparent to us, not to mention the SNMP traffic graphs were pretty far off too.

I've found Fortinet's tech support highly lacking. It took me about 2 weeks to get around to that answer, asked to have it escalated, but it never was. I think there was a language gap also, which is frustrating.

rharland2012

Agreed on the tech support piece....I'm grateful we don't have to reach out to them too often. It's painful and protracted. The only good luck I've had is getting on the phone and soldiering through wait times.