IPFIX with Extensions Configuration Procedures

To configure IPFIX with extensions flow reporting:
1
Click the Settings tab.
2
For Report Connections in the Settings section, select either of these radio buttons:
•
Interface-based
•
Firewall/App Rules-based

When enabled, the flows reported are based on the initiator or responder interface or on already existing firewall rules.

* 
NOTE: This step is optional, but is required if flow reporting is done on selected interfaces.
3
Click the External Collector tab.
4
Select the Send Flows and Real-Time Data To External Collector check box.
5
Select IPFIX with extensions as the External Flow Reporting Format from the drop-down menu.
6
Specify the External Collector’s IP address in the provided field.
7
Optionally, for the Source IP to Use for Collector on a VPN Tunnel, specify the source IP if the external collector must be reached by a VPN tunnel.
* 
NOTE: This step is required if the external collector must be reached by a VPN tunnel.
8
Specify the External Collector’s UDP port number in the provided field. The default port is 2055.
9
IPFIX uses templates that must be known to an external collector before sending data. Click the Generate ALL Templates button to begin generating templates. A message requesting confirmation displays.

10
Click OK.
11
Enable the Send Static AppFlow At Regular Intervals by selecting the check box.
12
Click the Generate Static AppFlow Data button. A message requesting confirmation displays.

13
Click OK.
14
Select the tables to receive static flows for from the Send Static AppFlow For Following Tables drop-down menu.
15
Select the tables to receive dynamic flows for from the Send Dynamic AppFlow For Following Tables drop-down menu.
16
Select any additional reports to be generated from the Include Following Additional Reports via IPFIX drop-down menu.
17
Click Accept.