Security Analytics

Hi all, Is it available on Stealthwatch 7 Client or web interface the ability to import the Netflow Exporters names? I found only the possibility to configure manually the name of each Netflow Exporter, but not a bulk configuration.

Is it possible to have information about the compatibility between smc v7 and Microsoft Active Directory? Particularly, is it compatible with Microsoft AD 2016?

Hello, I wish you could help me. I have a client with Stealthwatch (v6.10.3), in their environment there are a SMC, FC and a FS, but when I check the System visibility on the SMC, I only see the SMC and the FC (not FS). In the SMC javascript (license...

Hi all.  We're deploying StealthWatch system in our network especially EPC virtual appliance (7.1.1 2019.07.31.1620-0) but seems like it is not receiving flows from the AnyConnect Agent to the collector.   Cisco offers some kind of troubleshooting gu...

Hello,   How can we reset the password of the admin account that is used to login to GUI of flow-sensor ? Any script or linux file to manipulate ?     Thanks.

Hello Experts, I want to utilize existing hardware for Stealthwatch Enterprise deployment. We have UCS 5108 with B200 M5 Servers. I am following below link for the Virtual Server sizing: https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch...

I have a situation in which I am trying to determine what process is generating periodic UDP Netbios traffic from several workstations destined to a non-DC server. This traffic is getting blocked by my firewall, so the traffic is only observed leavin...

 I change NTP server and reboot Stealthwatch management console after that web console write:"Stealthwatch is initializing, please wait" long time. I start troubleshooting and  find that database Vertica doesn`t start. Vertica log file: "<Warning Abo...

As i understand, Proxywatch feature should correlate the external proxied IP/port with the real client IP/port, so that we get to know the real user IP that corresponds to a specific proxied access as seen from outside the proxy.   I am using WSA wit...

Hi All,   We have installed the StealthWatch in our environment to collect traffic via both Netflow and SPAN from core switch. But it's very strange is that no MAC address shown in the console. Is there any configuration required to be modified on St...

Hello, How can we reset the password of the admin account that is used to login to GUI of flow-sensor ? Any script or linux file to manipulate ?   Thanks.

Can someone please share the links for documentation of Stealthwatch integration with Cognitive Threat Analytics and Threat Intelligence Feed ?