Category: ASA

There are three steps to enable traceroute:

1. In policy map “global_policy” in class “inspection_default” you need to add “inspect icmp” and “inspect icmp error”
2. In policy map “global_policy” in class “class_default” you need to add “set connection decrement-ttl”
3. On your oudside interface, you need add access list, that permits ICMP with “time-exceeded” on ingress direction

There is code, that you can paste in your ASA firewall:

ASA supports netflow exports against some of Netflow collectors, for example ntopng. 

Here I'm describing steps required to configure netflow statistical export using ASA CLI.