Hi experts, If anyone can answer this as I am a bit not clear how the SW as a system updates itself against the latest threats available on the internet ? without any Talos or ETA type implementation, only in the standalone environment where only F...
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
Hi, Can I get more than the 10,000 max results back when I use the API call: URL = 'https://' + SMC_HOST + '/sw-reporting/v2/tenants/' + SMC_TENANT_ID + '/flows/queries'? I'm using Python with Pandas to alter the records so I can use machine learning...
Hi Expert, I would like to know if it is possible to integrate the SW with a firewall to block connections, such as SHUN operation on firewalls to offload certain transactions; at the moment common strategy for policy enforcement is with ISE, which...
StealthWatch was working fine but there is some issue that make that i cant see the web GUI of this appliance, additionally when I try to loggin in the desktop app throw me a message:"We encountered a system error.Confirm you have a trusted certifica...
I am new to the cisco stealthwatch product. I want to learn more about it. May I please know any useful documentation to start with? My plan is to begin with:1) How do I install, configure this product.2) How do I configure host group, flow.3)how do ...
Resolved! CISCO ETA-NETFLOW on Nexus 7k or 9k
Dear All,I am new to Stealthwatch Tech and planning to implement a POC, can someone please guide me on which Nexus model supports ETA(Encrypted Traffic Analytics) ? or is it built-in with Netflow 9 version? Thanks
Hi, I have configured SMC, Flow collector, and Sensor using a trial license. I have configured a SPAN port towards the Sensor. There is no Netflow configured, only SPAN towards the Sensor. SMC displays both the Sensor and collector as integrated and...
This week I ran into an issue that seems rather unexplained, but I felt I should mention it to help others, especially during this awkward time with being many potential targets of the current rampage of cyberattacks during the Ukraine attack.I use C...
Hi Team, I successfully integrated my ISE (ver 3.0.0.458) and Stealthwatch (ver 7.3.0) with pxgrid, also I can see the 802.1x clients live session on ISE (ip addr 10.40.5.81). And local DNS server works well on stealthwatch ,because stealthwatch's F...
Hi guys; I currently have a stealthwatch implemented on a client but the SMC server cannot show the trend collection flow. Could someone tell me what I could review to solve this issue?
Currently doing a project about DDoS attacks on the 5506 and cant figure out why UDP has some sort of output limit while TCP don't.??
We are running the version 7.3.1 of Cisco Stealthwatch onPremise.
I see that with version 7 of CSNA there are enhanced alert suppression capabilities - but it looks like it's API-based Any insight as to whether or not configuration of these enhanced alert suppression options will be made available via the WebUI of ...
Hi All I have gone through the initial setup for Stealthwatch Management Console Appliance: - CIMC IP Address - Management IP Address - Changed the sysadmin password - Changed the root password I can ping the device but when I HTTPS to it, it s...
Resolved! stealthwatch audit log forwarding
What is the difference between audit log destination on SMC appliance admin page and by adding syslog server using desktop client because we can see that using appliance administration interface syslog forwarding is compulsory over TLS. We need to ad...
