Exporting NX L7 metadata

Prev Next

You can configure your Network Security to export L7 metadata to your NDR appliance.

Perform the following steps on NDR:

  1. Login to NDR CLI.

  2. Create client profile.

    For more information on how to create a client profile see, Creating a client profile using the CLI.

  3. Create client group.

    For more information on how to create a client profile see, Creating a client group using the CLI.

  4. The client group generates a token, use this token to configure L7 metadata export on NX.

    You can configure your Network Security to export L7 metadata to your NDR appliance.

Note

Use the command show nxstatus to check the status of metadata for Network Security.

To enable the export of L7 metadata from your NX Network Security to your NDR:

  1. Log in to the Network Security CLI.

  2. Enter privileged mode:

    hostname (config) # enable

  3. Enter configuration mode:

    hostname # configure terminal

  4. Enter the metadata export configuration menu:

    hostname # no l7metadata-export config

  5. Run following command to configure l7metadata export

    1. hostname # l7metadata-export protocol https host NI_console_IP port 443 authorization-token <unique-token-id>

      Note

      Unique token ID is the unique token generated when you create a client group. For more information on generating the unique token ID, refer to, Creating a client group using the CLI.

    2. l7metadata-export enable

    3. hostname # showl7metadata-export config