Security Analytics

Hi  teamCisco Firepower 2110 Security Appliance(FPR-2110 V02)The firewall reports high CPU usage. How should this alarm be handled? 

I have installed SNA 7.5.1 in my lab. I have SMC, Flow Collector, Sensor and Data store VMs. I have enabled ETA on network devices and I cannot find where to look for information regarding ETA in SMC. As I found out in older versions of SNA there whe...

Hi Expert,My customer have used Cisco SNA (Stealthwatch) and they just buy new switch using Aruba CX which do not support Netflow (IPFIX support but for limited capability). I just thought after researched several info that Cisco SNA also able to mir...

While booting SNA Flow collector for first it's showing "The model is unregistered". How  to resolve this.I have attached a screenshot with this.

Hello, currently we are facing two data nodes failure from 9 nodes DSN cluster. We already tried to start the failed nodes but SMC returns the following Error:Unable to read database catalogs - cannot start databaseFirst, I would appreciate that if a...

I'm using the SNA APIs with dCloud.  When I use the following API "/tenants/{tenantId}/devices" in Postman, I get the error message, "The requested resource could not be found."  It should return I'm not able to use any of the APIs within this branch...

Hello everbody,After install Cisco ISE Passive Identity Connector on vmware esxi 6.7 with requirements 8 core,32 gig ram, and 250 storage faced issue  probing edd (edd=off to disable)... ok, with boot select  [2] Cisco ISE-PIC Installation (Serial Co...

Recently I found that my Security Network Analytics (with last update-smc-ROLLUP20240709-7.5.0) doesn't add new exporter. For example I have 132 exporters for 3 Netflow collectors, I configured new device (c8200) for export netflow and realized that ...

In my organization we are using stealth watch for NW monitoring.I'm new on this toolThere's a confusion regarding interface speedsAt interfaces tab it shows the if-xxx link speed is 1Gbps is the maximum bandwidth the interface is capable ofbut at the...

Uploaded the Trusted CA Root certificate to the "Trust Store" in the SMC. Then I generated a CSR from the SMC "Additional SSL/TLS Client Identities" and signed it by the CA server "Windows server", but when I upload the new signed certificate and cli...

Hello, Based on the ordering guide of SNA TI license is per collector. However there are a few options L-LC-TI-FC1K= -Use this PID for virtual Flow Collectors that are (or will be) configured as a FC1K for very small deployments L-LC-TI-FC2K= -Use th...

Hello,Stealthwatch 7.5.0 build 20240515.1517-6a87cd40f812-0.I am encountering some really odd flows in Stealthwatch, such as this one. Just look at the bytes and bandwidth: 1.45TB (12.78Tbps). That is really fast! Not to mention that there are no pac...

Hi, i have SNA ver 7.4 with one flow collector and i have no issue for sending flow traffic to collector except with Nexus 5600 switches.i have configured N5k as Nexus 5600 configuration guide for netflow. in SNA in exporters i cant see my Nexus 5600...

Hi, Just asking to see if there is anything to do with SMC stuck in initializing after power-failure? Seems 100 year backwards to lock troubleshooting out for customers and engineers behind a TAC-challenge. I should never have upgraded to 7.5.x i kne...