DX Unified Infrastructure Management

  • 1.  NBAR with NFA

    Posted Jul 11, 2014 02:19 AM
    Hello

     

    I want to like to look the linked integration in the NFA. I would like a question to the Group! One may have a configuration example that he could like to make me available?

     

     

    Thank you very much

     

    Andreas 



  • 2.  Re: NBAR with NFA

    Broadcom Employee
    Posted Jul 15, 2014 12:06 PM

    From the NFA side please check the Administration Guide under section "Create an NBAR2 Application Mapping Rule"

     

     



  • 3.  Re: NBAR with NFA

    Broadcom Employee
    Posted Jul 15, 2014 01:44 PM

    NBAR2 support was only added in NFA 9.2, so you would have to be at the latest version in order to use it.

     

    The full NFA 9.2 bookshelf can be found here .

    As Charles mentioned the Admin guide discusses creating NBAR2 application definitions, also it discusses importing the pre defined NBAR2 applications that are provided in a csv file when you install NFA 9.2.

     

    The Operator Guide, also found in the NFA 9.2 bookshelf, discusses which reports will actually show this data, and right now that is only in the Flow Forensics report titled "Conversation Sessions (NBAR2) Report".

     

    You should also note that we currently only support NBAR2 traffic with an EngineID of 13, this can be checked by running a PCAP on the Harvester and decoding the flow as 'CFLOW'.  If you need help with decoding NetFlow using Wireshark check out this doc.



  • 4.  Re: NBAR with NFA

    Posted Jul 16, 2014 01:12 AM
    Thank you for the information. It was but not what I meant. I meant a snippet for the Cisco it :-)


  • 5.  Re: NBAR with NFA

    Broadcom Employee
    Posted Nov 18, 2015 02:46 PM

    There is an example on this page: How To Enable NetFlow