First of all, I got interested with the help call which was very dominant :). Now coming to your question, You have got cat 9300 along with that you have got premier term and add-on licensing which will be very much useful for you as you will get complete and detailed traffic analytics.
Now, You get SW-Flow collector virtual edition and SMC virtual edition along with the licensing you purchase, Cognitive Intelligence is default in all SW Enterprise licenses, Cisco provides CTA activiation to any customer who owns term licensing by any buy method. Cisco fulfils CTA activation sent to an alias (Contact AM for this/Contact Cisco) for details of alias for customers with valid flow rate license purchase. Any requests like this should include your SO# to get the acitvation done.
With Cisco Catalyst 9000 access switches or 1000 and 4000 Series ISR, ASR 1000 Series, ISRv, or CSR 1000v routers running IOS XE 16.6.4 and Stealthwatch 6.9.4 or 6.10.2, you can enable ETA in addition to flexible NetFlow on switch or router interfaces and passively monitor encrypted flows. During the initial conversation between the POS terminal and payment gateway or the payment gateway and the payment processor, the IDP initiating the TLS handshake and several subsequent unencrypted messages are collected. Once exported to the NetFlow collector, the unencrypted metadata can be used to collect information regarding the cipher suite, version, and client’s public key length as reported by the cipher suite. Additionally, all traffic destined to cloud-based services will be analyzed in the Cognitive Intelligence cloud for any suspicious activity.
If you need more help on deployment or Cognititve intelligence support we can have a webex to resolve your problem.
