The Flexible NetFlow (FNF) provides statistics on packets flowing through the device. The FNF on WAN or LAN interfaces provide visibility for all the traffic (both ingress and egress) hitting the WAN or LAN interfaces on Cisco SD-Routing devices by using the Application Intelligence Engine (SAIE). The Application Intelligence Engine flow provides the ability to look into the packet past the basic header information. The SAIE flow determines the contents of a particular packet, and then either records that information for statistical purposes or performs an action on the packet.

Note	You can apply FNF only on WAN or LAN interfaces. You should not apply on both WAN and LAN interfaces.

To enable t he Flexible Netflow Application Visibility on the device, you must enable the flow data aggregation using Cisco SD-WAN Manager in the following ways:

• Performance monitor context profile (recommended method)

• Flow exporter to local controller

Note	If you have a existed FNF monitors, to avoid performance impact by adding a new performance monitor, add the flow exporter to local controller as flow exporter of existed FNF monitor. Otherwise, you can use the performance monitor context profile.

The following are the prerequisites:

• Ensure that the device run the Cisco IOS XE 17.13.1a image.

• Ensure that you enable flow data aggregation in Cisco SD-WAN Manager.

The following are the limitations:

• Only Aggregated statistics by Cisco SD-WAN Application Intelligence Engine (SAIE) is suppotted.

• On-demand troubleshooting is not supported.

• If context profile and FNF exporter uses the same name, the show flow exporter name command will display only one of them.

• The performance monitor context profile and flow exporter to local controller can only use either the context profile or flow exporter to local controller. Otherwise, it will dobule count the packets.

• Only CLI based configuration group is supported.

You can enahle the FNF Application Visibility either using the context profile or flow exporter on the device.

performance monitor context FNF profile app-visibility
 exporter destination local-controller source Null0
 traffic-monitor app-visibility-stats

interface GigabitEthernet5
 performance monitor context FNF

flow exporter fnf-1
 destination local controller
 export-protocol ipfix
 template data timeout 300
 option interface-table timeout 300 
 option vrf-table timeout 300
 option application-table timeout 300 
 option application-attributes timeout 300 

flow record fnf-app-visiblility
 match routing vrf input
 match interface input
 match interface output
 match application name
 collect counter bytes long
 collect counter packets long

flow monitor fnf-app-visiblility
 exporter fnf-1
 cache timeout inactive 10
 cache timeout active 60
 cache entries 5000
 record fnf-app-visiblility

interface GigabitEthernet5
 ip flow monitor fnf-app-visiblility input
 ip flow monitor fnf-app-visiblility output
 ipv6 flow monitor fnf-app-visiblility input
 ipv6 flow monitor fnf-app-visiblility output