delawarecity Wed, 05/20/2009 - 05:37
User Badges:

Thanks for reply.


I forgot that the higher end ASA models were able to generate netflows at the 8.1 level. I guess the capability to parse v9 netflow was probably added to MARS at that time. The lower end models only received that capability in version 8.2. Since there was no 8.2 version to select in MARS, I wasn't sure if it would work correctly.



delawarecity Wed, 05/20/2009 - 11:19
User Badges:

Check this link:


http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_bulletin_c25-526545.html



Cut and paste from article:


Cisco NetFlow Secure Event Logging: This feature was originally introduced on the Cisco ASA 5580, and is now extended to other Cisco ASA models to provide administrators with more comprehensive event logging information.




Farrukh Haroon Wed, 05/20/2009 - 22:37
User Badges:
  • Red, 2250 points or more

Ahh ok, I hope its true :)


Thanks for the link.


Regards

Farrukh

delawarecity Thu, 05/21/2009 - 05:42
User Badges:

Update:


I just received my first reports based on the netflow data from our ASA 5510. The ASA is generating netflow and MARS is parsing it correctly.



Actions

This Discussion