Enabling sFlow/Netflow on Fortigate 60D
Hello,
I've been enabling sFlow/Netflow on all our Cisco Firewalls and Routers, and all the data is successfully showing up. I've now been asked to enable it on a Fortigate Firewall which I have no experience with (Fortigate 60D v5.0,build0208 GA Patch 3).
I've added the following but nothing is coming through on the Netflow server:
config system sflow set collector-ip 192.168.18.159 set collector-port 9996 end config system interface edit internal set sflow-sampler enable set sample-rate 512 set sample-direction both set polling-interval 30
edit WAN set sflow-sampler enable set sample-rate 512 set sample-direction both set polling-interval 30
edit DMZ set sflow-sampler enable set sample-rate 512 set sample-direction both set polling-interval 30
Maybe the flows are being sent via the wrong interface and can't get to the sFlow/Netflow server? The sFLow/Netflow server is at a remote site via a router that sits on the same VLAN as the 'internal' interface.
FIREWALL # diagnose sniffer packet 'host 192.168.18.159' 6 0 a interfaces=[host 192.168.18.159] filters=[6] pcap_open_live: ioctl: No such device for host 192.168.18.159
Thanks
