This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG, Netflow and PRTG

Hello,

i have netflow aktivated and send the data from the firewall to PRTG Netflow Sensor. I am now wondering why i not the the amound of traffic i expect.

I would like to thee my traffic that is generated by Veeam. I see the traffic but the amount of traffic is very little. I see the communication between the

veeam server and the server that is backuped but just not the amound. When i check the firewall rule for that traffic i see that the traffic is counted correct

and the traffic runs in that firewall rule.

I am not a netflow expert but i expected to the a sample rate of the traffic that is generated related to the traffic stream also when there is just one long

stream i expected to see more traffic or am i awrong ?

Marco

This thread was automatically locked due to age.

0 Keyur over 5 years ago

Hi Marco Decker

I would recommend you to refer below given articles.

https://community.sophos.com/kb/en-us/125597

https://community.sophos.com/kb/en-us/132762

https://community.sophos.com/products/xg-firewall/f/authentication/98691/how-to-integrate-prtg-in-sophos-xg-firewall
Cancel
Vote Up 0 Vote Down

Cancel
0 Marco Decker over 5 years ago in reply to Keyur

Hello Keyur, thank you very much for your ansfer but that is not what i am searching. In general i have all Interfaces in PRTG and

the Data i get are valid. I am also aware how to configure the Firewall to send NEtflow Records to PRTG i also get the records and

the values are okay but they are not complete. For example i am doing every day a file transfer between a location that is connected

with site to site vpn to one server in the LAN Zone. In the Protocoll view i can see the communication also in the firewall reports i

see the amount if traffic that are about 50GB every day. But in the netflow graph i see also the traffic just with very little traffic so that

its at the end of the communication list also its one of the biggest communication sessions for an individual host and i would expext to

see that in netflow.

BR

Marco
Cancel
Vote Up 0 Vote Down

Cancel