Cisco Secure Nework Analytics Sandbox and More

[l8ubcdgky553]

Hello, I had a few questions about working with the Cisco sandbox tool: 

I had created a few instances of the Cisco Secure Network Analytics and have experimented with the tools and credentials provided. 

Working in these sandbox environments, I noticed how the network traffic created by the CDS Traffic Generator produced a few anomalies. I was interested in how this Cisco tool could simulate the analysis of telemetry data in the event of more diverse anomalies. Would this be possible by working with the Cisco Secure Network Analytics REST API in a sandbox?

In the end of the instructions for the sandbox mentions how users can utilize the Cisco Secure Network Analytics REST APIs. I had trouble trying to access the API. To access this API would I need to open a second terminal to access the API simultaneously running the CDS traffic generator? Is there more documentation I can refer to?

I was also curious if the Cisco Secure Network Analytics sandbox had the capabilities to host a digital twin of network architecture, or if there was another Cisco tool/sandbox where I can experiment with this use case. 

Thanks

[Ruben Cocheno]

@l8ubcdgky553 

Perhaps if you are a customer ring your Cisco SE to know more and other capabilities since Cisco can host any Lab that you might need.

If you a Partner you can leverage the sandboxes available and dcloud.cisco.com as well

[l8ubcdgky553]

Thank you for the information. Do you know how can I reach a Cisco representative to learn more about my use case?

[bigevilbeard]

Hey @l8ubcdgky553 based on your first question, there are some sample here https://github.com/CiscoDevNet/stealthwatch-enterprise-sample-scripts there is more documentation here also https://developer.cisco.com/docs/stealthwatch/enterprise/i hope this is what you were looking for. 

You asked in your first question 

I was also curious if the Cisco Secure Network Analytics sandbox had the capabilities to host a digital twin of network architecture, or if there was another Cisco tool/sandbox where I can experiment with this use case. 

I think you are asking here if you can connect a network (routers/switches/endpoints etc) to a Cisco Secure Network Analytics instance. In the sandboxes, unless this is in the catalog and pre-build, this is not possible. It is not possible to connect sandboxes together either. It would be possible to bridge in CML-P if you were running this in your local environment and use CML as the twin network/replicate network. As mention in another reply, if you have access to https://dcloud.cisco.com/ this may have a more advanced demo/sandbox which you can use. If you are looking for something more bespoke, this request would need to go via your Cisco AM to see if this request can be done, which would then land with the Cisco Labs team i would expect.

Hope this helps.