command must be used?

An engineer wants to generate NetFlow records on traffic traversing the Cisco ASA.

Which Cisco ASA

command must be used?

A. flow-export destination inside 1.1.1.1 2055

B. ip flow monitor input

C. ip flow-export destination 1.1.1.1 2055

D. flow exporter

View Answer

Answer: A

Explanation:

The syntax of this command is: flow-export destination interface-name ipv4-address | hostname udp-port

This command is used on Cisco ASA to configure Network Secure Event Logging (NSEL) collector to which

NetFlow packets are sent. The destination keyword indicates that a NSEL collector is being configured.

+ The interface-name argument is the name of the ASA and ASA Services Module interface through which the

collector is reached.

+ The ipv4-address argument is the IP address of the machine running the collector application.

+ The hostname argument is the destination IP address or name of the collector.

+ The udp-port argument is the UDP port number to which NetFlow packets are sent.

You can configure a maximum of five collectors. After a collector is configured, template records are

automatically sent to all configured NSEL collectors.

Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/

monitor_nsel.html