Submit a ticketCall us

Solarwinds & Cisco Live! Barcelona
Join us from the 29th of January to the 2nd of February at Cisco Live 2018 in Barcelona, where we will continue to show how monitoring the network with SolarWinds will keep you ahead of the game. At our booth (WEP 1A), we will demonstrate how SolarWinds network solutions can help. As a bonus, we are also hosting a pre-event webinar - Blame the Network, Hybrid IT Edition with our SolarWinds Head Geek™, Patrick Hubbard on January 24th - GMT (UTC+0): 10:00 a.m. to 11:00 a.m. There's still time to RSVP.

Home > Success Center > Netflow Traffic Analyzer (NTA) > Capture Netflow Traffic of a Endpoint through a Proxy Server

Capture Netflow Traffic of a Endpoint through a Proxy Server

Created by Interspire Import, last modified by MindTouch on Jun 23, 2016

Views: 1,404 Votes: 0 Revisions: 9

Issue

Netflow Traffic Analyzer (NTA) fails to capture the flow information from an endpoint that is connected through a proxy server.

Environment

NTA

Cause

If an endpoint is connected through a proxy server, the destination IP address for the endpoint is actually the proxy server itself. The proxy server terminates the HTTP session with the endpoint, communicates out to the Internet, then feeds the result back to the enpoint. NTA sees only the flow between the proxy and Internet.

Resolution

  1. The proxy server configuration may be changed to an intercepting proxy also known as transparent proxy. Refer to the supplier documentation for proxy configuration.
  2. If the proxy configuration is successful, then the NTA is not aware of the proxy's existence and the source/destination IP address are not rewritten from the endpoint's perspective.
  3. Verify the full conversation details in NTA. 
Last modified

Tags

Classifications

Public