Hello, i have got issue about FMC have not alerts if i try to scan from the internal network? and also when i scan the internal network that is thier network packet passes through the firewall results in source ip address maps to other internal netwo...
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
I am reading the Cisco Stealthwatch Desktop Client User Guide and the following section about the Variance-based alarms Never trigger alarm when less than: Also known as the minimumthreshold, this is a static value that indicates the lowest value to ...
In the current version of Stealthwatch (Cisco Secure Network Analytics), is there a feature to take an action in order to block automatically threat, suspicious behavior of an IP address ?
Hi Team, please need help close the Vulnerabilities of C3750X-24T-S cisco switch Vulnerabilities:-SSL Weak Cipher Suites Supported Version 15.2(4)E10.
Hi Guys, I use FMC1600-K9, version：6.6.4, and FTD: FPR2130-NGFW-K9My FTD(10.131.175.35) can NOT ping the direct connection interface IP(10.131.175.34) which is my gatewaybut it is pingable after I do "clear arp" on FTD, it could be pingable for abo...
Hello, we have Stealthwatch (Secure Network Analytics) with the latest version 7.4.1. A few days after upgrade, Global threat widget stopped work and an error occured: Unable to load the global threat alerts widget. When we tried to open Dashboards >...
I have stealthwatch 7.3.2 smc and 3 flow collectors for netflow with licenses for all products. SMC and all FC's has conectivity with all Publics IP of Cisco Talos Address and port services. Despite, when I try to generate a report in Talos for any h...
Resolved! Fix Vulnerabilities
Please help how to fix this Vulnerabilities:- SSL / TLS Renegotiation Handshakes MiTM Plaintext Data Injection
Hello everbody,After install Cisco ISE Passive Identity Connector on vmware esxi 6.7 with requirements 8 core,32 gig ram, and 250 storage faced issue probing edd (edd=off to disable)... ok, with boot select [2] Cisco ISE-PIC Installation (Serial Co...
Resolved! CISCO ETA-NETFLOW on Nexus 7k or 9k
Dear All,I am new to Stealthwatch Tech and planning to implement a POC, can someone please guide me on which Nexus model supports ETA(Encrypted Traffic Analytics) ? or is it built-in with Netflow 9 version? Thanks
Hi allMy first question is the most obvious one, has anyone got this integration to work?I've been fiddling with this for a day now with my on-prem Graylog servers and all I get from SecureX is "Unable to connect to Graylog, validate the configured A...
Hi Team, hope you doing good . This is in regard’s to the one of the item which is WS-C3750G-24TU-S1UCould you please suggest the ECCN number & confirm whether it is restricted or unrestricted ?
Hello, everyone. My office is located in sunny Dubai. Ironport teams are reluctant to let us sell the S series due to many factors. Among these factors are the lack of a good cache app and URL filtering, as well as the fact that our end-users complai...
Hello fellow network engineers, I’m curious about a feature of cisco Stealthwatch, which I came across during my research.The feature I mean is the “Host Group Automation Service”.I read about it in the following pdf from cisco: https://www.cisco.com...
Resolved! SNMP OIDs
Dear Cisco Support, I want to setup the following monitoring : for Modem and SIM card for the following commands : Sh cell 0/1/0 security (SIM Status = xxx)Sh cell 0/2/0 security (SIM Status = xxx)Sh cell 0/1/0 hardware (Modem Status = xxx)Sh cell ...
