hi, i have a question what happens when you exceeded the limit of the licensestealthwatch stops to records that the flows that pass the limit?can someone upgrade to a bigger frl license - can be the same virtual appliance?thanks for the help, best re...
Hi, we have a Stealthwatch 7 deployed. We send the events to QRadar and in QRadar we receive this kind of log: (...)<110>Mar 04 14:23:01 vap11039 StealthWatch[4925]: LEEF:2.0|Lancope|Stealthwatch|6.8|51|0x7C|src=10.90.7.10|dst=0.0.0.0|dstPort=|proto=...
Hi all, I am using Stealthwatch Management Console and Flow Collector Version 7.0.2 with CTA enabled in both devices. I am unable to detect malware in the Host CTA window but able to view malware traffic in SMC. I am using router 4451-X model to expo...
I have a problem with flow rate license ordering. I cant find a good document or ordering guide for this license. I have read in stealthwatch datasheet that flow rate license defines the volume of flows that may be collected and is licensed on the ba...
Hi. My customer using stealthwatch vm. But today morning, the slic channel down alarm is working. Why did alarm on? Please answer my question.
Hello Team I cant find more detailed information about the SMC failover on stealthwatch. From the configuration guide I was able set the cluster and I understand that the secondary can be promoted to primary, but I dont find any information regarding...
Hi All, I'm looking at configuring the database backup for Stealthwatch. I have managed to configure and establish a connection to an SMB share, however, when I click on 'Create Backup' Stealthwatch immediately backs up and there doesn't seem to be a...
Hi,Is there any procedure to integrate Active Directory with Stealthwatch (SMC)?Cisco Stealthwatch Management Console v 6.10 Best regardsIvan
Hello i find a Update Guide about stealthwatch varsion 6.10.1 on cisco, i want to update stealthwatch from 6.9 to 6.10.1,but i can't find the update file to download. i try to find it on lancope.flexnetoperations.com,but only version 6.9. where can i...
Hi all,My C9500 switch can send NetFlow v9 to Flow collecter as I can see its data flow in SMC but not for the interface status.I have 2 Palo Alto firewalls that are sending NetFlow to the FC as well but I can see their interface status in SMC. Belo...
Hi Team, Someone knows if is possible that stealthwatch show a HOST NAME next to the HOST ADDRESS (IP) The users works fine between ise and LDAP, but i can´t see in Stealthwatch GUI the HOST NAME (LDAP).I attach an example of the GUI as I see Steal...
Getting a successful backup via SMB Fileshare is becoming a challenge. I don't see anywhere that there are other options - sftp/scp, etc... Has development looked at enhancements? We are running 7.2 Thanks,Bob
The SMC remains in the Installing state. It has been in the same state for more than two days. I restarted the SMC but still with that problem, in the log file I do not see that the update process has begun. Log:Mon Jan 13 2020 12:20:01 GMT-0600 (hor...
I'm trying to setup netflow export on my Check Point firewall to my Stealthwatch flow collector, but it seems that the data isn't being accepted because the exported records are missing the mandatory "ipv4 tos" key value. I used https://configurenet...
Does Cisco Stealthwatch Flowsensor support forwarding IPFIX flows to Third-Party flow analytics tool?If it is possible, then where can I get Stealthwatch IPFIX "Private Enterprise Element Definition" to decode flows on the recipient end.I was success...
