Hello, Is unclear if we should disable baseline for dhcp users , can someone please help me to understand what should be configured?
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
Has Stealthwatch Cloud alerting changed? For example, I’m trying to review an alert that triggered. Normally, to see the network events associated, there used to be a blue clickable link at the TimeDate and that would bring up the specific network de...
I have stealthwatch 7.3.2 smc and 3 flow collectors for netflow with licenses for all products. SMC and all FC's has conectivity with all Publics IP of Cisco Talos Address and port services. Despite, when I try to generate a report in Talos for any h...
Hi everyone I have a doubt about this appliance and its upgradeI follow the guide steps but these 2 names me confused, back Up Databases for the SMC (Manager) and Flow Collector vs Back Up Data Store. It's not the same thing ?, I did the backup data...
Now, i hope to test that upgrade the stealtwatch to v7.1.1 from v7.0.0i completed that applied the last patch in v7.0.0.but when i upload the update file in the SMC, i had the fail if you know for this reason, please help me
If we have a UDP director replicating flows to two flow collectors, it would still mean 2x flow rate licenses are consumed right? Since this is flow rate is determined by flows received on the flow collectors. So really, there is no difference having...
Hi everyoneI recently upgraded my stealthwatch to version 7.4 and now I detected that the data of interfaces is blank."No data to display"Can you help about the root cause o someone already had the same problem?Thanks you so much
Resolved! Fix Vulnerabilities
Please help how to fix this Vulnerabilities:- SSL / TLS Renegotiation Handshakes MiTM Plaintext Data Injection
Hello Everyone!I have installed Stealthwatch floww collector and in the first page on the browser after login, I am asked to change the passwords. I type in the fields and then click to proceed but page doesn't change and no error appears! I don't un...
Hello, Has anyone backed up the database in stealthwatch version 7.0? I want to back up the database on my computer, but trying to test the connectivity with the remote system gives me the following error On my computer I enabled SMB, I gave ...
Hello Experts, I am using NX9K version 9.3(3), and I want to enable IGMP querier for L2 multicast, but I can't find the command, please see the attached picture and kindly advise! Regards
Hi I am recently moving to SD Access and would like to use UDP director as the flow destination to push to switches as the flow destination, In my old network, I was using 2 flow collectors as flow destination which will then forward to UDPD, but no...
Hi experts, If anyone can answer this as I am a bit not clear how the SW as a system updates itself against the latest threats available on the internet ? without any Talos or ETA type implementation, only in the standalone environment where only F...
Hi, Can I get more than the 10,000 max results back when I use the API call: URL = 'https://' + SMC_HOST + '/sw-reporting/v2/tenants/' + SMC_TENANT_ID + '/flows/queries'? I'm using Python with Pandas to alter the records so I can use machine learning...
Hi Expert, I would like to know if it is possible to integrate the SW with a firewall to block connections, such as SHUN operation on firewalls to offload certain transactions; at the moment common strategy for policy enforcement is with ISE, which...
