cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1149
Views
0
Helpful
1
Replies

DNAC or StealthWatch?

DAVID
Level 3
Level 3

I am configuring both StealthWatch and DNAC and both are capable of being flow collectors for my 9300 switches.  My question is under what circumstances would I choose one over the other? Can I use both? 

 

I am currently licensed with DNA Advantage on my 9300's.

1 Reply 1

Preston Chilcote
Cisco Employee
Cisco Employee

On recent IOS-XE code (17.3) you can do both and many customers are.  The way I like to think about it is that Cisco DNA Assurance is used for isolating and troubleshooting everyday problems on the network (onboarding, poor performance, connectivity) and Stealthwatch is used for learning of possible security issues on the network (such as suspicious traffic flows).  Cisco DNA has a Stealthwatch workflow that will help configure the necessary netflow and embedded traffic analytics configs for the switches to export the necessary data to the Stealthwatch flow collector.  Here is a pretty good and short video showing it in action.

 

https://www.youtube.com/watch?v=PKujAdIoiOU

 

The video may assume you already have the Stealthwatch credentials defined in Settings->Stealthwatch