Palo Alto NetFlow Source Interface Issue

Hi,

If I am understanding this correctly then the data plane are the logical interfaces types like VLAN, Tunnels, subinterfaces and so on. Based on the page https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/firewall-interface-identifiers-in-snmp-managers-and-netflow-collectors the collector needs to decipher type of the interface directly from the interface index in the flows. Which NTA is not doing at the moment.

Let me please know if I am wrong. Otherwise I think it would be best to open a ticket on support for further investigation.

Under Setup > Interfaces > _your_mgmt_interface_ > Network Services, make sure SNMP is checked.
In the same window, make sure that the SolarWinds Platform polling server IP address is added in the Permitted section.

Under Setup > Services > Services Features, if you have "Use Management Interface for all" in your Service Route Configuration, then no need to make any changes. However, if you have it set to custom, then you'll need to make sure that NetFlow is set to use default for both source and interface.

Under Setup > Operations > Miscellaneous, make sure that SNMP is copnfigured

Under Server Profiles > Netflow, make sure that the SolarWinds Platform poller that is receiving the flow is defined on port 2055, with 1 Minute refresh, 20 Packets, 1 minute timeout. We don't want PAN-OS field types.