AppFlow Agent

This enables sending AppFlow and Real-Time data to the AppFlow Agent. An AppFlow Agent can either be SonicWall Flow Analytics or SonicWall NSM (Network Security Manager).

Before configuring the AppFlow Agent, ensure the firewall is registered and managed by NSM. For information on registering a firewall in NSM, refer to SonicWall NSM Administration Guide.

To send AppFlow and Real-Time data to your AppFlow Agent

1. Navigate to DEVICE > AppFlow > AppFlow Agent.

   

2. For AppFlow Agent Configuration Mode, select either Basic or Advanced modes. When Advanced is selected, additional Advanced Configuration options become available to configure alternate flow server and advanced flow settings.
3. For Auto-Synchronize AppFlow Agent, the AppFlow Agent needs static data from the firewall before it can display it on the AppFlow Monitor, AppFlow Report, and AppFlow Dashboard. By enabling this checkbox, the firewall automatically synchronizes data to the AppFlow Agent.
4. For Advanced Flow Server Config Mode, using Active Standby mode, flows are directed to AppFlow Agent 1 (when AppFlow Agent 1 is Up). When AppFlow Agent 1 is Down, and when AppFlow Agent 2 is Up, then the flows are directed to AppFlow Agent 2. In Load Balancing mode, you are able to select between Load Balancing Modes; Mirror and Share-Load. These radio buttons are enabled only when Load Balancing mode is selected. When Share-Load is selected and both flow servers are Up, the flows are divided equally amongst the two AppFlow Agent. When mirroring is selected, all the flows are sent to both the flow servers.
5. Under the AppFlow Agent Address option IP, the device sends AppFlows and real-time data to the specified IP address/address object. If AppFlow Agent is reachable through a VPN tunnel, then you can specify the source IP to use for the VPN tunnel. Note that the AddrObj address object can only be of type Host or FQDN.
6. For the Source IP to use over VPN Tunnel option, when the AppFlow Agent is reachable through the VPN tunnel, you can specify that IP here. Choose an IP from the VPN policy.
7. Use Server Communication Timeout to redirect data to the Dashboard. From the SonicWall firewall GUI, Dashboard data can be pulled from the AppFlow Agent. A Timeout specified is a number of seconds to wait before failing when the data has been fetched from the AppFlow Agent. The minimum value is 60, maximum value is 120 and default value is 60.
8. Test Connectivity connects to the AppFlow Agent and gathers registration information, image versions, and counters.
9. Static data can be sent manually to the AppFlow Agent using the Synchronize Server option. This can only be done one time after starting of the AppFlow Agent and registering with the firewall.
10. Synchronize Log Settings sends the necessary fields of log settings to the AppFlow Agent for log display.