Troubleshooting Tip: Netflow is not exporting local-in traffic

[mle2802]

Description	This article describes how to troubleshoot the issue with Netflow is not sending local-in traffic for analysis.
Scope	FortiGate
Solution	Configure the  Netflow on FortiGate using this KB article: Technical Tip: How to Configure Netflow Description. Run the packet capture on port UDP/2055 from FortiGate, and it is possible to see that there is no traffic matching the filter 'cflow.protocol == 1' for ICMP traffic to FortiGate. To export traffic to the collector, traffic logs need to be enabled. On FortiGate, there are no logs for local traffic.  To enable local-in log, run the following command: config log setting     set local-in-allow enable     set local-in-deny-unicast enable     set local-in-deny-broadcast enable end After that, confirm local-in traffic is logged and Netflow is sending it to the collector.