Palo Alto Networks Knowledgebase: What is Unidirectional and Bidirectional NetFlow?

What is Unidirectional and Bidirectional NetFlow?

4727
Created On 02/07/19 23:58 PM - Last Updated 02/07/19 23:58 PM
Mobile Network Infrastructure
Resolution

Unidirectional NetFlow:

  • The flow of traffic from a host A to host B consists of packet exchange in two directions (A->B and B->A<reply>). These are considered two different unidirectional flows.
  • The Palo Alto Networks firewalls, with the exception of the PA-4000 Series, support unidirectional NetFlow. The firewall expects to see traffic flow from A to B and from B to A. However, when NAT is involved, the flow appears from A to B and B to the natted IP of A.

 

Bidirectional NetFlow:

  • The flow of traffic from a host A to host B is considered just one flow, from A->B. This includes the sum of packets from A->B and B->A.
  • Bidirectional NetFlow is not supported on Palo Alto Networks devices.

 

See Also

PAN-OS Netflow Templates and Field Types (PAN-OS 5.0)

PAN-OS Netflow Templates and Field Types (PAN-OS 4.1)

 

owner: dreputi



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClYYCA0&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language