How to configure NetFlow on Sophos SG firewalls

Sophos SG firewalls support IPFIX, which is compatible with Auvik TrafficInsights.

These instructions assume:

• The date, time, and time zone are correctly set on the firewall.
• You have admin access to the Sophos SG web admin console.
• The IP address of your Auvik collector is known.

Access the Sophos SG web interface

1. Open a web browser and type in your Sophos SG IP address.
2. Log into the web admin console with an administrative (read-write) user.

Configure NetFlow

1. Navigate to Logging & Reporting > Reporting Settings.
2. Scroll down to IPFIX Accounting.
3. Check Enable.
4. Under OID, leave the default value of 1.
5. Select the + icon to add a new collector. Use the following information:
   1. Name: A recognizable name for the Auvik collector
   2. Type: Host
   3. IPv4 Address: IP address of your Auvik collector
6. Select Apply to save the settings.