Cisco ASA Series Cli Configuration Manual page 1992

Licensing Requirements for NSEL
Licensing Requirements for NSEL
Model License Requirement
All models Base License.
Prerequisites for NSEL
NSEL has the following prerequisites:
•
•
•
Guidelines and Limitations
This section includes the guidelines and limitations for this feature.
Context Mode Guidelines
Supported in single and multiple context mode.
Firewall Mode Guidelines
Supported in routed and transparent firewall mode.
IPv6 Guidelines
Supports IPv6 for the class-map, match access-list, and match any commands.
Additional Guidelines and Limitations
•
•
•
•
•
Cisco ASA Series CLI Configuration Guide
1-4
IP address and hostname assignments must be unique throughout the NetFlow configuration.
You must have at least one configured collector before you can use NSEL.
You must configure NSEL collectors before you can configure filters via Modular Policy
Framework.
If you have previously configured flow-export actions using the flow-export enable command, and
you upgrade to a later version, then your configuration is automatically converted to the new
Modular Policy Framework flow-export event-type command, which is described under the
policy-map command.
Flow-export actions are not supported in interface-based policies. You can configure flow-export
actions in a class-map only with the match access-list, match any, or class-default commands. You
can only apply flow-export actions in a global service policy.
To view bandwidth usage for NetFlow records (not available in real-time), you must use the threat
detection feature.
Only the ASA 5580 and 5585-X support clustering.
NetFlow records are sent only for connections whose source and destination addresses are both IPv4
or both IPv6. NetFlow records are not sent for connections with mixed traffic, such as NAT64 or
NAT46.
Chapter 1 Configuring NetFlow Secure Event Logging (NSEL)