Submit a ticketCall us

Welcome to the NEW Success Center. Search all resources (documentation, videos, training, knowledge base articles) or browse resources by product. If you are unable to find what you are looking for, please contact us at customersuccess@solarwinds.com

 

 

 

 

Home > Success Center > Netflow Traffic Analyzer (NTA) > Capture Netflow Traffic of a Endpoint through a Proxy Server

Capture Netflow Traffic of a Endpoint through a Proxy Server

Created by Interspire Import, last modified by MindTouch on Jun 23, 2016

Views: 1,075 Votes: 0 Revisions: 9

Issue

Netflow Traffic Analyzer (NTA) fails to capture the flow information from an endpoint that is connected through a proxy server.

Environment

NTA

Cause

If an endpoint is connected through a proxy server, the destination IP address for the endpoint is actually the proxy server itself. The proxy server terminates the HTTP session with the endpoint, communicates out to the Internet, then feeds the result back to the enpoint. NTA sees only the flow between the proxy and Internet.

Resolution

  1. The proxy server configuration may be changed to an intercepting proxy also known as transparent proxy. Refer to the supplier documentation for proxy configuration.
  2. If the proxy configuration is successful, then the NTA is not aware of the proxy's existence and the source/destination IP address are not rewritten from the endpoint's perspective.
  3. Verify the full conversation details in NTA. 
Last modified
20:28, 22 Jun 2016

Tags

Classifications

Public