What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

Packet capture vs. Netflow of remote site

Votes:

0

Scenario: Monitor Internet traffic via Netflow in a hub-spoke VPN network with Cisco ASA firewalls over cable/DSL connections (6Mbit down / 1Mbit up). VPN traffic carries Corp data but Internet surfing goes out each firewall. PRTG server is in the core network.

Question: What is the most efficient way to monitor Internet traffic via Netflow on a Cisco ASA? Install a remote probe in each site and create a Netflow sensor...or... install Netflow sensors for each site on the PRTG server in the core network?

ciscoasa hub-spoke netflow remotemonitoring

Created on Aug 22, 2013 7:03:14 PM



1 Reply

Votes:

0

Hello,

thank you very much for your KB-Post. I would recommend to have Remote Probes in each site, to only send the "results" back to the core, not the full Netflow packets. And in addition to that, benefit from the caching of monitoring results by the Probes, should the connection be lost for a short time.

best regards.

Created on Aug 23, 2013 1:44:37 PM by Torsten Lindner [Paessler Support]




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.