topic Re: Cisco Stealthwatch in Security Analytics https://community.cisco.com/t5/security-analytics/cisco-stealthwatch/m-p/3360798#M283 <P>You can send netflow, or syslog or any UDP traffic, to a UDP Director. You have rules on the UDP Director to direct those UDP communications to final destination or even multiple destinations.&nbsp; When the final destination(s) receives the traffic it appears as if it came from the original source.</P> <P>A Flow Sensor is connected to a TAP or SPAN port. It performs deep packet inspection to extract the appropriate metadata (source, destination, ports, url, application identification, etc), then it generates flow data and sends to a Flow Collector (maybe through a UDP Director).</P> Wed, 04 Apr 2018 23:48:24 GMT dethrift 2018-04-04T23:48:24Z Cisco Stealthwatch https://community.cisco.com/t5/security-analytics/cisco-stealthwatch/m-p/3360329#M282 <P>Dear Friends,</P> <P>Can anyone explain me different between Flow Sensor and UDP Director ? Both appliances capture NetFlow traffic and send it to Flow Collector, but I don't understand why we must use both of it, In my opinion both of this appliances doing the same work...</P> Tue, 20 Aug 2019 19:38:10 GMT https://community.cisco.com/t5/security-analytics/cisco-stealthwatch/m-p/3360329#M282 mikiNet 2019-08-20T19:38:10Z Re: Cisco Stealthwatch https://community.cisco.com/t5/security-analytics/cisco-stealthwatch/m-p/3360798#M283 <P>You can send netflow, or syslog or any UDP traffic, to a UDP Director. You have rules on the UDP Director to direct those UDP communications to final destination or even multiple destinations.&nbsp; When the final destination(s) receives the traffic it appears as if it came from the original source.</P> <P>A Flow Sensor is connected to a TAP or SPAN port. It performs deep packet inspection to extract the appropriate metadata (source, destination, ports, url, application identification, etc), then it generates flow data and sends to a Flow Collector (maybe through a UDP Director).</P> Wed, 04 Apr 2018 23:48:24 GMT https://community.cisco.com/t5/security-analytics/cisco-stealthwatch/m-p/3360798#M283 dethrift 2018-04-04T23:48:24Z