Question about Encrypted Traffic Analytic and StealthWatch

[Ryan YC]

Hi Guys,

Recently my company purchased 2 Cisco Catalyst 9000 switches with DNA Advantage software license,

I noticed the DNA Advantage software included Encrypted Traffic Analytic(ETA) feature, but we don't have any NetFlow collector like StealthWatch, so how can I use this function? If we buy a StealthWatch virtual edition, I think the DNA Advantage software not supports StealthWatch, right?

Please kindly inform me if I wrong. Thanks!

Kind Regards,

Chang

[jamegill]

Hello Chang,
Congratulations on the Catalyst 9000 switches. The advanced features, like ETA, are un-matched. With a Stealthwatch Flow Collector you can ingest the additional flow telemetry that ETA provides and via the Stealthwatch Management Console you can examine those flows, query into the flow and ETA data, and take advantage of the augmented analytics available through Global Threat Analytics. I think this link will get you started:
https://www.cisco.com/c/en/us/solutions/enterprise-networks/enterprise-network-security/eta.html#~stickynav=2

--jg