Determining which NetFlow sources to monitor

The information that NetFlow Monitor collects is influenced by the location of the NetFlow sources relative to firewalls or other devices that perform network address translation (NAT). In short, the data is dependent on what and how the source sees. Carefully consider which routers or other NetFlow-enabled devices you want to configure to export flows to NetFlow Monitor to ensure that you see the type of data that you want to see.

Depending on where the source is located relative to the device performing NAT, traffic to and from internal (private) IP address are reported differently in the exported NetFlow data.

Other conditions may also change the nature of the data reported by NetFlow Monitor.