SRX sampling input/output question

[krw]

Have NNA but have been using it for a specific customer for their CPE's.

Recently just added an SRX we have acting as a main GW/FW. Outside interface has a /30 on it
connected to one of our outside switches.

Inside interface connected to our inside LAN.

I only just added the config sampling to the inside interface ge-0/0/1. Been getting data for
about a week now.

To get a better view of the traffic flows, should I also sample the outside interface, ge-0/0/0 as well?
Or sample input on one and output on the other?

Thanks.

[tgriep]

If you want to just look at the traffic flow for what is coming in and out of the outside interface, setting up that interface as a separate monitor and sending it to a different Source in the NNA server would make it easier to just see the flow for that interface.

But, if you want to see the traffic on both interfaces, you would create a Source Group and add those 2 sources to that group and run your reports and queries against that source group.

Let us know if you have any further questions.