HTTPS monitoring using Netflow

[Ashwini Kumar]

Hi All,

I have configure Netflow Version 9. I'm able to monitor HTTP traffic however, I'm not able to see HTTPS traffic. When I run command

#Show ip cache flow

I can see https traffic being used by one client as

serial 1/0/0  x.x.x.x    x.x.x.x     tcp  62902   443   1

not even in monitoring tool Prime Infrastructure 3.3 show this. I can see http on it but not https.

Looking for assistance on how to monitor https traffic utilization.

Thanks,

Ashwini

[Mark Malone]

Hi

Https is encrypted thats why you can see it , you would need to be at the endpoints to see the encrypted traffic , we do it with our IWAN traffic ovr ipsec but the only way the monitoring tool can see it is when it leaves the encrypted tunnel

although with some of then new 9k campus using DNA i believe they have the capability to view inside encrypted tunnels to a certain extent