StealthWatch was working fine but there is some issue that make that i cant see the web GUI of this appliance, additionally when I try to loggin in the desktop app throw me a message:"We encountered a system error.Confirm you have a trusted certifica...
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
I am new to the cisco stealthwatch product. I want to learn more about it. May I please know any useful documentation to start with? My plan is to begin with:1) How do I install, configure this product.2) How do I configure host group, flow.3)how do ...
Resolved! CISCO ETA-NETFLOW on Nexus 7k or 9k
Dear All,I am new to Stealthwatch Tech and planning to implement a POC, can someone please guide me on which Nexus model supports ETA(Encrypted Traffic Analytics) ? or is it built-in with Netflow 9 version? Thanks
Hi, I have configured SMC, Flow collector, and Sensor using a trial license. I have configured a SPAN port towards the Sensor. There is no Netflow configured, only SPAN towards the Sensor. SMC displays both the Sensor and collector as integrated and...
This week I ran into an issue that seems rather unexplained, but I felt I should mention it to help others, especially during this awkward time with being many potential targets of the current rampage of cyberattacks during the Ukraine attack.I use C...
Hi Team, I successfully integrated my ISE (ver 3.0.0.458) and Stealthwatch (ver 7.3.0) with pxgrid, also I can see the 802.1x clients live session on ISE (ip addr 10.40.5.81). And local DNS server works well on stealthwatch ,because stealthwatch's F...
Hi guys; I currently have a stealthwatch implemented on a client but the SMC server cannot show the trend collection flow. Could someone tell me what I could review to solve this issue?
Currently doing a project about DDoS attacks on the 5506 and cant figure out why UDP has some sort of output limit while TCP don't.??
We are running the version 7.3.1 of Cisco Stealthwatch onPremise.
I see that with version 7 of CSNA there are enhanced alert suppression capabilities - but it looks like it's API-based Any insight as to whether or not configuration of these enhanced alert suppression options will be made available via the WebUI of ...
Hi All I have gone through the initial setup for Stealthwatch Management Console Appliance: - CIMC IP Address - Management IP Address - Changed the sysadmin password - Changed the root password I can ping the device but when I HTTPS to it, it s...
Resolved! stealthwatch audit log forwarding
What is the difference between audit log destination on SMC appliance admin page and by adding syslog server using desktop client because we can see that using appliance administration interface syslog forwarding is compulsory over TLS. We need to ad...
Resolved! Stealthwatch TACACS
I would like to use TACACS for logging into Stealthwatch's webUI. Per the user guide, I added ISE servers as authentication servers in the Stealthwatch Management Console. Also, I added the Stealthwatch server as a network device into ISE and confi...
https://developer.cisco.com/docs/stealthwatch/cloud/#!stealthwatch-cloud-api-version-3 When you pull back an observation, the source id of the object is what? I assumed it was a hostname ID, but that doesn't seem to line up. I said that because it ...
Hello I have been trying to install Stealthwatch Management Console, VCE2000 with high end specs (Better than the one suggested). The installation goes through just fine, yet when I login to GUI for the first time using lan411cope password it takes ...
