Nagios Support Forum

I am guessing that you have setup the ASA to send the flow data statistics for the the outside interface of the firewall. With the IP addresses getting NATed, The flow data probably only has the NATed data. If you want to view the IP addresses before they are NATed, you can setup the inside interfa...

The Nagios Network Analyzer displays the data it receives but I am guessing that your device is only sending on the NATed data and not the original IP addresses. If your device supports sending 2 flows at the same time, you could create a separate source on the inside interface and send that to the...

ssax wrote:Are you seeing the NATted IP in the flows?

Yea, we can see the NATed IP in destination column and all the source IPs are public iPs not our LAN subnets.

Yea, i can see the NATed IP in destination ip column and source are all public IPs, not our LAN subnet IPs

we cant see any hits from that IP

I am facing an issue with Nagios Network analyzer, we have 10.88.0.0 range in LAN segment and this IP is Nated in our cisco asafirewall (lan segment to outside interface nat). we have configured cisco ASA firewall in nagios network analyzer netflow. 10.88.0.0/16 range IPs are not visible in netflow ...