Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Netflow from ASA over VPN tunnel

I have an ASA5505 at a remote site that I have configured to send netflow data.

Problem is, the only way I get the data is to have it sent from the outside interface of the ASA.

NTA insists on having the node and interface in its database, but the outside address is not reachable from my Orion server (with NTA on it). I've added the node as external, but can't add the interface as Orion can't discover it (it can't talk to that IP).

Is there any way to manually add an interface (not discover it), or to tell NTA to consider the flow to be from another address? The ASA is in the database using its inside IP address.

Terry

Find more posts tagged with

Accepted answers

All comments

mcbridea

Does the "Allow monitoring of flows from unmanaged interfaces" option help?

GZhytar

Hi twkirk,

just to clarify Andy's post. "Allow monitoring of flows from unmanaged interfaces" allow you to save data to DB when one of the interfaces in conversation is unmanaged by Orion (not in database), but the second one still should be managed and monitored by NTA.

If both interfaces are unmanaged, unfortunately, right now it won't be possible to store this data to DB.

The good news are that we've heard this request from several other customers, so please help us in prioritizing this by adding your request to NTA Feature requests thread: http://thwack.com/forums/73.aspx

thanks

mcbridea

What I was thinking is that if the ASA is addable using the inside interface that would suffice for the flows on the outside interface as well.