Skip to main content

Palo Alto (NetFlow v9) Configuration

This document outlines the steps to configure Palo Alto for NetFlow v9 flow export with ObserveOps Flow Explorer.

Configuration Steps​

Define a NetFlow Server Profile​

Navigate to Device > Server Profiles > NetFlow in the GUI and configure the following:

  • Name: Enter a name for the NetFlow profile.
  • Template Refresh Rate: Set to 1 minute (recommended).
  • Active Timeout: Set to 1 minute (recommended).
  • Export PAN-OS Specific Field Types: Enable to export App-ID and User-ID fields.
  • Server Name: Enter a name for the server.
  • Server: Enter {MOTADATA_NETFLOW_SERVER_IP}.
  • Port: Enter 2055.

Assign the Profile to a Firewall Interface​

Navigate to Network > Interfaces > Ethernet.

Click the interface link on the Ethernet tab, and select the NetFlow profile created in the previous step.

After completing the configuration, navigate to Menu > Flow Explorer and select Explorer to view the active flow data.