Netflow for specific traffic

[luca1994]

Hello team,

i have a question about Netflow.

Netflow is clear to me that it can be enabled on a network interface to track traffic either in RX or TX or both. I wanted to know if it is possible to enable netflow only for a certain type of traffic and not for all traffic to pass the interface where it is enabled.
I looked in the official documentation but could not find anything about it.

Thanks for the help
BR

[saneeshpv_FTNT]

@luca1994 

As far as I know it is not possible filter specific traffic to send to NetFlow collector and even NetFlow doesn't support sampling. The only option to send the specific interface traffic to collector and from there you could filter required traffic for your analysis based on the available flows.

Netflow does not support sampling, but Sflow does.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-sample-rate-for-Netflow/t...

[luca1994]

Hello @saneeshpv_FTNT ,

If I understand correctly, by enabling Sflow you can play with filters to forward only specific traffic?

Thank you

BR

[saneeshpv_FTNT · Accepted solution]

@luca1994 

Still, you cannot apply filters, but you can perform sampling with sflow.

You can read more about sampling in the below blog post.

https://blogs.manageengine.com/network/netflowanalyzer/2011/02/25/sampling-and-netflow-analyzer.html