Help Docs

Configuring Flow Exports for Sophos Firewalls

For NetFlow analysis, you need to configure your devices to export flows to Site24x7 On-Premise Poller, which is the NetFlow collector. The On-Premise Poller will be listening to the particular port to receive flows. Learn how to find the port number of your On-Premise Poller. 

Configure NetFlow v5 on Sophos Firewalls using the following steps:

  1. From your Sophos firewall device, go to Administration > Netflow.
  2. Netflow Server Name: Enter the name of your On-Premise Poller.
  3. Netflow Server IP/Domain: Enter the IPv4 or IPv6 address of your On-Premise Poller.
  4. Netflow Server Port: NetFlow exports happen over a specific port. Enter the UDP port number; the default port is 9996.
Note

To send traffic data to the NetFlow server, ensure you check the box next to Log Firewall Traffic under Log Traffic.

Refer to Sophos's documentation for more information.

Was this document helpful?

Would you like to help us improve our documents? Tell us what you think we could do better.


We're sorry to hear that you're not satisfied with the document. We'd love to learn what we could do to improve the experience.


Thanks for taking the time to share your feedback. We'll use your feedback to improve our online help resources.

Shortlink has been copied!