cancel
Showing results for 
Search instead for 
Did you mean: 
kenn1
Level 7

Tracking Bytes That are Sent and Returned

Greetings-

I want to be able to track bytes that are sent and returned. Does one need "flows" turned on in order to do this? If so. how does one turn on "flows". I don't believe we are capturing these in our current SEIM environment.

0 Kudos
4 Replies
McAfee Employee

Re: Tracking Bytes That are Sent and Returned

Not necessarily, but you do need something reporting byte counts. Many firewalls will provide it. Flows would be my last resort. Thanks.

0 Kudos
kenn1
Level 7

Re: Tracking Bytes That are Sent and Returned

How do we pick out the byte counts or know if our firewalls are providing this to the SEIM?

0 Kudos
McAfee Employee

Re: Tracking Bytes That are Sent and Returned

I would look for bytes in the raw log. What type of firewalls do you have? Thanks.

0 Kudos
kenn1
Level 7

Re: Tracking Bytes That are Sent and Returned

CISCO ASAs

0 Kudos