I normally have several ways I can see what traffic is that is on my network. But for some reason, with the Sophos XG FW I have less visibility than I did with Cisco 2800 Routers.
The charts on the FW its self are pretty lack luster so we have iView. This is GREAT but I cannot select a custom time only full days and date ranges. I need to be able to look at yesterday :13:15 - 14:25 to see exactly what spikes were.
I thought OK, I can just use Netflow and let our old software get the data and I can get the reports I want. But it seems that the XG FW does not send a lot of flows to the Netflow Monitor. Again, MAYBE its my Netflow software because they don't advertise Sophos or Cyberoam support. So I downloaded Scrutinizer (Who advertises they work with Sophos and Cyberoam). Same low amount of data coming in at 0.7 flows per second. My Cisco devices that have less than half the traffic passing flow over 500 flows per second.
Am I doing everything wrong? Or does network visibility need a lot of work on the XG FWs?
This thread was automatically locked due to age.
