Uploaded the Trusted CA Root certificate to the "Trust Store" in the SMC. Then I generated a CSR from the SMC "Additional SSL/TLS Client Identities" and signed it by the CA server "Windows server", but when I upload the new signed certificate and cli...
I'm in the process of configuring SNA Manager and flow collectors and applying the Best practice guide. I've enabled FIPS mode and Common Criteria Encryption libraries on SNA Flow collectors after uploading the correct certs to both SNA Manager and f...
The scenario is that all traffic ingesting to flow sensor is north-south, and all hosts are NATed by public IPs. Currently, there is no east-west traffic. However, if east-west traffic were to ingest, would the hosts be visible as endpoints or networ...
What does it mean? - flow collector longest export exceeded I have some allarms like that for my devices, maybe I need to increase intervals for monitor or exporter?
Anybody know if the c9606R and c9300X-24Y can work with Stealthwatch? I try to configure on the c9606R and c9300x-24y flow record REC-IN match ipv4 source address match ipv4 destination address match transport source-port match transport destina...
Hi there. Can cisco security analytics delete automatically unusable interfaces for exporters in a while?
I am unable to manually assign ANC policies to hosts in the Secure Network Analytics Host Report section. When I inspect a specific host and try to assign one at the Host Summary Pane, I am receiving this error: We encountered an error from one or mo...
after upgrading to version 7.5 Cisco Security Network Analytics shows empty in Update Manager is it normal?
Error " The authentication service was unable to fulfill your request. If this problem persists, contact your administrator."
I try to replace appliance identity certificate Generated CSR for ManagerGenerated CSR for CollectorSent them to OUR CA (DC) (admins did template follow this guide https://dependencyhell.net/2021/securing-stealthwatch-with-ca-signed-certificates) Ge...
What is the best method for getting security events and analytics into an external SIEM (Splunk)? Thank youPhilip
We wanted to integrate our IBM SOAR with Cisco Threat Grid and it requested for an API key. From where we can get the key and also does we need license to integrate with Cisco Threat Grid?
思科SNA原先叫（Stealthwatch）设备，将语言切换到中文时，进入流量搜索模块，时间范围选择自定义时选择好时间范围后无法搜索将语言切换为英文后可以正常进行搜索原因是英文语言的搜索是这样样子的（11/07/2023 02:36 PM - 12/13/2023 02:41 PM）而中文语言搜索是这样的（11/02/2023 02:39 PM.....12/13/2023 02:44 PM）中间是.....系统无法识别，所以就无法在中文语言的环境下进行搜索
Hi, I need an advice. I want to be allarmed when one host eirher consume bandwith above 30 Mbps, I made new policy in the "Core events" - single host policy but it seems doesn't work What am I doing wrong?
