Fortinet black logo

External Systems Configuration Guide

Flow Support

Flow Support

FortiSIEM supports NetFlow v5, NetFlow v9, IPFIX and sFlow. You need to configure any device to send traffic to FortiSIEM on these ports and FortiSIEM will automatically parse and handle the flows. No other configuration is required.

Flow traffic should be sent to the below specified ports.

Protocol / Port

Network Flow

UDP / 2055 NetFlow v5 and NetFlow v9
UDP / 2055 Internet Protocol Flow Information Export (IPFIX)
UDP / 6343 sFlow

If you want to send to another port, then you need to configure port translation NAT on FortiSIEM.

Flow Support

FortiSIEM supports NetFlow v5, NetFlow v9, IPFIX and sFlow. You need to configure any device to send traffic to FortiSIEM on these ports and FortiSIEM will automatically parse and handle the flows. No other configuration is required.

Flow traffic should be sent to the below specified ports.

Protocol / Port

Network Flow

UDP / 2055 NetFlow v5 and NetFlow v9
UDP / 2055 Internet Protocol Flow Information Export (IPFIX)
UDP / 6343 sFlow

If you want to send to another port, then you need to configure port translation NAT on FortiSIEM.