Follow these steps to enable Palo Alto (PANOS 9.0 or later) devices to export NetFlow v9 records to a Sinefa Probe.
Step 1: Ensure that the time on the Palo Alto Firewall time settings are accurate. An incorrect date or time on the device will have adverse effects on the reports.
Step 2: Browse to the following location on the Palo Alto Firewall management interface:
Device -> Server Profiles -> Netflow
Create the Profile with the following settings:
Step 3: Browse to the following location on the Palo Alto Firewall management interface:
Network -> Interfaces
When selecting and interface to apply the Netflow Profile to consider if the interface is pre 'Network Address Translation' so that you can also see the internal IP addresses if the Firewall is performing NAT.
Apply the Netflow Profile as shown:
Step 4: Commit the Configuration
More detailed steps available from Palo Alto Networks (Support Account may be required):