Security

Reply
Contributor I

Clearpass netflow collector

Hello,

 

I am working on a POC for Clearpass. We are running through the several collectors Clearpass has for profiling. One of them is Netflow but I was not able to find much information on how Netflow is used or configured on Clearpass.

 

From the docs I think I understood that Netflow will be used to discover ports that endpoints are using. Is this just for previously discovered endpoints or will it discover new endpoints?

 

How is it configured on Clearpass? Does it need to be enabled somewhere on the server and what port is it listening on?

 

Thanks.

 

Edit: punctuation

Moderator

Re: Clearpass netflow collector

Your correct in that it will discover open ports and it is also for new endpoint a feed into profiler to allow us to 'find/discover' new endpoints.

 

Note V5/V9 and V10 aka IPFIX + sFLOW is supported.

 

HTH.


Best Regards
-d

ClearPass Product Manager

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Contributor I

Re: Clearpass netflow collector

Hi, thanks for the reply.

 

Is there something I need to do on Clearpass to enable it? I can't find anything in the documentation other than the reprofile interval.

 

I have it configured on a couple of test switches but nothing seems to show up in Clearpass.

 

Thanks

Moderator

Re: Clearpass netflow collector

Nope - it ready to use. 


Best Regards
-d

ClearPass Product Manager

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: