https://community.cisco.com/t5/security-analytics/flowsensor-as-a-solution-for-application-visibility/m-p/4154219#M583 <P>Hello everyone,</P><P>&nbsp;</P><P>I understand that FlowSensor can provide "additional security context" by enabling the "Export HTTP(S) Header Data", "Export Packet Payload" and "Enable VXLAN Decapsulation".</P><P>&nbsp;</P><P>1) Does that mean all the Stealthwatch Default Application shown in the following document? Or do I need the Endpoint Concentrator?</P><P>&nbsp;</P><P><A href="https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/management_console/default_applications_definitions/SW_7_3_Default_Applications_Definitions_DV_1_0.pdf" target="_blank">https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/management_console/default_applications_definitions/SW_7_3_Default_Applications_Definitions_DV_1_0.pdf</A></P><P>&nbsp;</P><P>2) Must I turn off the netflow exporter for a switch if it is configured with RSPAN to forward all frames of the switch to the FlowSensor port?</P><P>&nbsp;</P><P>Thanks in advance.</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Sun, 20 Sep 2020 06:39:52 GMT Support ACME 2020-09-20T06:39:52Z https://community.cisco.com/t5/security-analytics/flowsensor-as-a-solution-for-application-visibility/m-p/4154219#M583 <P>Hello everyone,</P><P>&nbsp;</P><P>I understand that FlowSensor can provide "additional security context" by enabling the "Export HTTP(S) Header Data", "Export Packet Payload" and "Enable VXLAN Decapsulation".</P><P>&nbsp;</P><P>1) Does that mean all the Stealthwatch Default Application shown in the following document? Or do I need the Endpoint Concentrator?</P><P>&nbsp;</P><P><A href="https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/management_console/default_applications_definitions/SW_7_3_Default_Applications_Definitions_DV_1_0.pdf" target="_blank">https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/management_console/default_applications_definitions/SW_7_3_Default_Applications_Definitions_DV_1_0.pdf</A></P><P>&nbsp;</P><P>2) Must I turn off the netflow exporter for a switch if it is configured with RSPAN to forward all frames of the switch to the FlowSensor port?</P><P>&nbsp;</P><P>Thanks in advance.</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Sun, 20 Sep 2020 06:39:52 GMT https://community.cisco.com/t5/security-analytics/flowsensor-as-a-solution-for-application-visibility/m-p/4154219#M583 Support ACME 2020-09-20T06:39:52Z