This is an old revision of the document!

Fortigate Trisul Netflow configuration

Trisul can produce deep reports from Fortigate firewalls Netflow feature.

Configuring on Fortigate

# config system netflow
    set collector-ip <Trisul-IPv4-Address>
    set collector-port <2055>
end

 
config system interface 
edit <interface name>
set netflow-sampler both 
end

 
config system interface 
edit <interface name>
set netflow-sampler rx
end

If you enabled set netflow-sampler both on all interfaces this could result in double counting and show increased bandwidth numbers