Security Analytics

Hi folksI'm running a trial of the SAL feature in Defence Orchestrator and have a question. Events seems to be displayed with the oldest events on top and are refreshed as you scroll down. However our current workflow when troubleshooting connectivit...

Hi, Does anyone have documentation on how we could integrate Stealthwatch Cloud in ISE?  We are currently running on ISE version 3.0 and use our own PKI for the PxGrid certificate. Regards,Jayson

Hi, i have restored the flow collector to the Factory default, but after reconfiguring the FC now not able to access from the SMC.i receive the following error message from the SMC java console; Alarm: FlowCollector Management Channel Down Details of...

Hi, Could I ask if anyone has ever encountered this problem in configuring the internet proxy with StealthWatch Enterprice?After configuring the proxy under \ appliance configuration \ Network Service \ Internet Proxy and applied, I get the message "...

I have a network with 40,000 endpoints. Many of these end devices communicate with other entities (internet and WAN sites) external to our organisation. My netflow exporters are all within my network. Do I reqiure 40,000 licences or do I need to fact...

Hi Team, I need a help,How to whitelist a host group to avoid alarm,  I am getting alarms in custom security policy for genuine traffic.To avoid those thing, I have create an host group and add those IPs in that group. After that in custom policy I e...

HiI would like to know if wlc 5508 v8.5.171.0 with flex connect local switching cental auth support netflow to work together with flow collector for netflow. If the wlc doesn't support exist another option?Thanks you.Ivan.

Hi my name is Ivan:I would like to know1)  stealthwatch support netflow lite, sflow?2) If I choose to install flow collector for netflow, this box will support netflow lite 3) Is mandatory in switches 2960-x has a c1-one foundation license to support...

Hi All,I have some questions about Stealthwatch Cloud Private Network Monitoring deployment and sizing.For the on-premise PNM deployment, how many cloud sensor virtual appliances do I actually need for my network? How do I determine the number requir...

Can't seem to find much documentation on SMC to SWC integration and its benefits. In the SMC 7.3.2 the option for integration can be found under Deploy > Stealthwatch Cloud. Requires input to SWC URL, SWC USERNAME, SWC API KEY. Any guidance greatly a...

Hey Everyone, Wanted to check if the Stealthwatch Flow Collectors can be configured in failover/high availability mode? I know the Stealthwatch Management Console supports failover but not sure the Stealthwatch Flow Collectors.  Looking for best prac...

We are trying to setup and receive alarm notifications via email from Stealthwatch and are getting an email format error. "Could not connect to smtp host, 0.0.0.0 port: 25.  We have the SMTP server configured properly.  I have attached a screenshot o...

Hi Sir,Can any one please tell me that how to configure SMC to get reports ( Ex, stealthwatch data transfer), on specific mail id for a specific time period. Data transfer port, Mail alert or the report of daily alarm. Please tell me, how to configur...