I have been running NetFlow successfully on all of my ASAs for the past few months. Recently, one of my ASA failover pairs has decided to stop sending netflow packets. Is there a command to restart the subsystem that handles netflow, or any other fix I'm overlooking? I'd like to see if there are easier options before I move into reload-standby;reload situations or even cold cycling the pair.

Relevant config:

flow-export destination NYHQ-SERVERS 12346
flow-export template timeout-rate 1

policy-map global_policy
 class class-default
  set connection decrement-ttl
  user-statistics accounting
  flow-export event-type all destination

ASA# sh flow counter
destination: NYHQ-SERVERS 12346
    packets sent                                         45442077
    block allocation failure                                    0
    invalid interface                                           0
    template send failure                                       0
    no route to collector                                       0
    source port allocation failure                              0

1 Answer 1


I found the reason and it was a stupid mistake. For some reason the global policy was not enabled globally. By executing service-policy global_policy global I got netflow talking once again.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.