cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
567
Views
0
Helpful
1
Replies

Firepower upgrade to 7.24 results in increased number of netflows

We recently upgraded from 7.0.4 to 7.2.4.   then next day we started receiving alerts from our Smart Licensing that we have a shortage of 46K "Stealthwatch Flow Rate" licenses.    That has been going on for a month now.   We have been trying to determine where all these extra netflows are coming from.  Have reviewed the New Features in all versions 7.0.4 to 7.2.4 and found no caveats.

Anyone else encounter this same issue?

1 Reply 1

After upgrading from version 7.0.4 to 7.2.4, one possible cause for a Stealthwatch Flow Rate license shortage could be the introduction of new features and improvements in the Management Center. These new features and improvements may require additional resources or configurations that can impact the utilization of the Stealthwatch Flow Rate license.

To troubleshoot this issue, you can check the release notes for version 7.2.4 and compare the new features introduced in this version with your current configuration. Look for any features or changes that may affect the flow rate and bandwidth usage. You can then adjust your configuration accordingly to optimize the utilization of the Stealthwatch Flow Rate license.

It is also recommended to review your licensing and ensure that you have the appropriate number of Stealthwatch Flow Rate licenses for your deployment. If you are running low on licenses, you may need to purchase additional licenses or optimize your usage to fit within the available licenses.

Here is an example of how you can troubleshoot and optimize the utilization of the Stealthwatch Flow Rate license:

1. Review the release notes for version 7.2.4: Check for any new features or changes related to flow rate and bandwidth usage.

2. Compare the new features with your current configuration: Identify any features or configurations that may affect the flow rate and bandwidth usage. This could include changes to traffic-handling features, network modules, or enhanced monitoring capabilities.

3. Analyze your current license utilization: Determine the number of active flows and the flow rate in your deployment. This can be done using monitoring tools or command-line interfaces.

4. Optimize your usage: If you are running low on Stealthwatch Flow Rate licenses, consider optimizing your usage. This could involve adjusting configurations to reduce the number of active flows, filtering specific traffic, or prioritizing critical flows.

5. Consider additional licenses: If optimizing your usage is not sufficient, you may need to purchase additional Stealthwatch Flow Rate licenses to accommodate the desired flow rate and bandwidth usage.

6. Monitor and fine-tune: After making changes to your configurations or obtaining additional licenses, monitor your deployment to ensure that the Stealthwatch Flow Rate license utilization is within the desired range. Fine-tune your configurations as needed to optimize performance and license utilization.

Remember to consult the documentation specific to your version and deployment for detailed instructions and best practices.

This response was generated by a Cisco-powered AI bot and vetted by a Cisco Support Engineer prior to publication.
This is part of a monitored experiment to see if the bot can help answer questions alongside community members. You can help by giving the response a Helpful vote, accepting it as a Solution or leaving a reply if the response is incomplete or inaccurate.
Review Cisco Networking for a $25 gift card