Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

IPS netflow analyzer

Hi All,

we have IPS 4240 with MARS 25. I like to export netflow from IPS to the MARS for anomaly detection. But I couldn't find any document to show how to configure netflow analyzer in IPS to export to MARS. if you show me any documents, I would be very appreciated.

thanks

Alex

1 REPLY
New Member

Re: IPS netflow analyzer

As I know Cisco IPS doesn't work with netflow.

As an alternative you may create custom signatures for established TCP sessions and UDP packets exchange, but it will generate a lot of events on your alarm panel. You can export this information via SNMP-traps for any monitoring system.

492
Views
0
Helpful
1
Replies
CreatePlease to create content