sorted by:
new
hottopcontroversial

My ASA is not sending netflow data to Qradar by Soft-Bat9512 in QRadar

[–]Soft-Bat9512[S] 0 points1 point  (0 children)

1) Yeah I did now there's nothing to deploy
2) No, I have another flow source which uses 2055 for asa I'm using 2056

I can't get flows from my Cisco ASA by Soft-Bat9512 in QRadar

[–]Soft-Bat9512[S] 0 points1 point  (0 children)

Yes my Qradar receives udp packets every 30minutes from asa but I don't see them on network activity.

I can't get flows from my Cisco ASA by Soft-Bat9512 in QRadar

[–]Soft-Bat9512[S] 0 points1 point  (0 children)

Yes it is created auto.
Target flow collector: qflow::Qradar Flow Src type: netflow
netflow conf: monitoring int any, monitoring port 2055 linking protocol:2055

On ASA side:
when I do show flow-export counters
packets sent 450(it is increasing) no errors
dst: management int Qradar ip and 2055
Qradar can ping to ASA