NFA: What to do when an unwanted device is sending flows to your harvester
search cancel

NFA: What to do when an unwanted device is sending flows to your harvester

book

Article ID: 246723

calendar_today

Updated On:

Products

CA Network Flow Analysis (NetQos / NFA)

Issue/Introduction

I am receiving flows from an unknown IP and it appears in reports.
From the harvester is there a way to block that IP?

Environment

Release : 21.2

Component :

Resolution

NFA does not have a function to exclude a device that is sending flow to a harvester.  In this case, I would suggest the following two options:

  1. Disable flow on that device
  2. Enable a firewall rule to block flow from that device
    1. The Windows Firewall or Linux iptables could do this
    2. A network firewall between the device and the harvester could block this ip address and port combination