topic Re: Stealtchwatch 7.5.1 ETA (Malware Detection) in Security Analytics

Stealtchwatch 7.5.1 ETA (Malware Detection)

llomjaria — Mon, 04 Nov 2024 15:45:08 GMT

I have installed SNA 7.5.1 in my lab. I have SMC, Flow Collector, Sensor and Data store VMs.

I have enabled ETA on network devices and I cannot find where to look for information regarding ETA in SMC. As I found out in older versions of SNA there where possibility to enable ETA (by enabling Cognitive Analytics) like here:

https://www.youtube.com/watch?v=4pIQ24iUyPU

Can you give documentation or information where should I look for ETA data in version 7.5.1 or how to enable it on this version?

Re: Stealtchwatch 7.5.1 ETA (Malware Detection)

matthrob — Mon, 04 Nov 2024 17:56:56 GMT

We've evolved Secure Network Analytics! More specifically the global threat analytics service has been decommissioned and the outcome of "encrypted traffic analytics" delivered through SNA on-premises without requiring the upload of telemetry to a cloud service.

Similar outcomes to the GTA service can be achieved by using the Central Analytics feature and integrating the Talos Threat Intelligence feed.

Re: Stealtchwatch 7.5.1 ETA (Malware Detection)

llomjaria — Tue, 05 Nov 2024 06:51:59 GMT

Thank you for the information!

I cannot find documentation regarding Central Analytics feature and Talos integration. Can you please share if you got them?