How To Enable Netflow on FirePower Using FDM
1. Log into FDM and then click on the Device section at the top of the page.
2. Click on View Configuration under Advanced Configuration at the bottom of the page.
3. Click on FlexConfig Objects on the left-hand side of the page.
4. Click + in the top right of the page to add a new FlexConfig Object.
a. Give your object a name, such as Netflow
b. optional Give your object a description
c. Edit the following code so that the INTERFACENAME, FLOWCOLLECTORIP and
NETFLOWPORT sections are replaced with the appropriate values for your
network
flow-export destination INTERFACENAME FLOWCOLLECTORIP NETFLOWPORT
flow-export template timeout-rate 5
flow-export active refresh-interval 1
no flow-export delay flow-create 1
!
policy-map global_policy
class class-default
flow-export event-type all destination FLOWCOLLECTORIP
d. Copy & paste your code into the Template section
e. Edit the following code so that the INTERFACENAME, FLOWCOLLECTORIP and
NETFLOWPORT sections are replaced with the appropriate values for your
network
policy-map global_policy
class class-default
no flow-export event-type all destination FLOWCOLLECTORIP
!
no flow-export destination INTERFACENAME FLOWCOLLECTORIP NETFLOWPORT
no flow-export template timeout-rate 5
no flow-export active refresh-interval 1
flow-export delay flow-create 1
f. Copy & paste your code into the Negate Template section
g. Click OK
Sample FlexConfig Object for netflow:
5. Click on FlexConfig Policy on the left-hand side.
6. Click + under Group List
7. Select the netflow config you created above and then click OK.
8. You should see the config for netflow in the Preview window, as well as any other
FlexConfig Objects you have selected.
Sample FlexConfig Policy Preview:
9. Click SAVE
10. Click the icon at the top of the screen, and deploy your changes.