topic Re: Stealthwatch and netflow, netflow lite, sflow in Security Analytics

Stealthwatch and netflow, netflow lite, sflow

ivan.martin — Mon, 30 Aug 2021 04:19:57 GMT

Hi my name is Ivan:

I would like to know

1) stealthwatch support netflow lite, sflow?

2) If I choose to install flow collector for netflow, this box will support netflow lite

3) Is mandatory in switches 2960-x has a c1-one foundation license to support flex netflow?. If the license is no necessary, can I pass traffic netflow lite to flow collector for netflow? or I should install flow collector for sflow?

4) Someone have a documentation about flow collector and the support of netflow

Thanks for your answer.

Regards.

Re: Stealthwatch and netflow, netflow lite, sflow

jerbutle — Mon, 30 Aug 2021 13:19:43 GMT

Hello Ivan, here are answers based on my knowledge.

1. Yes

2. You can download the sFlow file from https://software.cisco.com/

3. I don't think the C1 is needed, unless that is your only license model. The other option would be an a la carte or EA licensing option.

4. I would check the install guide https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/system_installation_configuration/SW_7_2_1_Installation_and_Configuration_Guide_DV_3_3.pdf

Re: Stealthwatch and netflow, netflow lite, sflow

ivan.martin — Mon, 30 Aug 2021 14:06:47 GMT

Hi jerbutle

According your recommendation,

2. To Support netflow lite I should install Flow collector for sflow?

3. https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15_2_6_e/configuration_guide/b_1526e_consolidated_2960x_cg/b_1526e_consolidated_2960x_cg_chapter_010101.html

Needs license, netflow lite is an option?

Regards, Ivan.