How can we help?

How to configure IPFIX on a SonicWall Gen 7 Firewall



These instructions assume:

  • The SonicWall device is running SonicOS version 7.0 or higher.
  • The date, time and time zone are correctly set on the firewall.
  • You have administrative access to the firewall.
  • The IP address of your Auvik collector is known.

To access the SonicWall web interface

    • Open a web browser and type in your SonicWall’s  IP address
    • Log into the web admin console

Enable the Flow collector


    • Navigate to Device
    • Click on AppFlow
    • Click on Flow reporting
    • Click on Settings
    • Check Enable Real-Time Data Collection
      Note: You must reboot the device after enabling Real-Time Data Collection
    • (Optional) Enable interface-based reporting if you prefer the flows to be tagged from the interfaces of the firewall
    • Click Accept to save the settings


    • Navigate to AppFlow
    • Click on Flow Reporting
    • Click on External Collector
    • Select Send Flows and Real-Time Data to External Collector
    • Under External Flow Reporting Format, select IPFIX (Netflow Version 10)
    • In the External Collector’s Server Address section, check IP and enter the Auvik collector IP address
    • In the External Collector’s UDP Port Number field, enter the port number you’d like to use. Choose from any of these ports: 2055, 2056, 4432, 4739, 6343, 9995, or 9996.
    • Enable Send IPFIX / Netflow Templates At Regular Intervals
    • Enable Report On Connection OPEN
    • Enable Report on a Connection CLOSE
    • Click the Generate ALL Templates button
    • Click Accept to save the settings

IPFIX should now be enabled on your SonicWall Gen 7 firewall device.


Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request