Is there any documentation for using the "additional BPF" field from packet capture utility on Stealthwatch Flow Collector.Trying to find out are there any examples or syntax on how to use this field.TIA
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
unable to launch ASDM please assistWarning: Potential Security Risk AheadFirefox detected a potential security threat and did not continue to . If you visit this site, attackers could try to steal information like your passwords, emails, or credit ca...
Resolved! stealthwatch license excedeed
hi, i have a question what happens when you exceeded the limit of the licensestealthwatch stops to records that the flows that pass the limit?can someone upgrade to a bigger frl license - can be the same virtual appliance?thanks for the help, best re...
Hi, we have a Stealthwatch 7 deployed. We send the events to QRadar and in QRadar we receive this kind of log: (...)<110>Mar 04 14:23:01 vap11039 StealthWatch[4925]: LEEF:2.0|Lancope|Stealthwatch|6.8|51|0x7C|src=10.90.7.10|dst=0.0.0.0|dstPort=|proto=...
Hi all, I am using Stealthwatch Management Console and Flow Collector Version 7.0.2 with CTA enabled in both devices. I am unable to detect malware in the Host CTA window but able to view malware traffic in SMC. I am using router 4451-X model to expo...
I have a problem with flow rate license ordering. I cant find a good document or ordering guide for this license. I have read in stealthwatch datasheet that flow rate license defines the volume of flows that may be collected and is licensed on the ba...
Hi. My customer using stealthwatch vm. But today morning, the slic channel down alarm is working. Why did alarm on? Please answer my question.
Resolved! Stealthwatch SMC failover
Hello Team I cant find more detailed information about the SMC failover on stealthwatch. From the configuration guide I was able set the cluster and I understand that the secondary can be promoted to primary, but I dont find any information regarding...
Hi All, I'm looking at configuring the database backup for Stealthwatch. I have managed to configure and establish a connection to an SMB share, however, when I click on 'Create Backup' Stealthwatch immediately backs up and there doesn't seem to be a...
Hi,Is there any procedure to integrate Active Directory with Stealthwatch (SMC)?Cisco Stealthwatch Management Console v 6.10 Best regardsIvan
Hello i find a Update Guide about stealthwatch varsion 6.10.1 on cisco, i want to update stealthwatch from 6.9 to 6.10.1,but i can't find the update file to download. i try to find it on lancope.flexnetoperations.com,but only version 6.9. where can i...
Hi all,My C9500 switch can send NetFlow v9 to Flow collecter as I can see its data flow in SMC but not for the interface status.I have 2 Palo Alto firewalls that are sending NetFlow to the FC as well but I can see their interface status in SMC. Belo...
Hi Team, Someone knows if is possible that stealthwatch show a HOST NAME next to the HOST ADDRESS (IP) The users works fine between ise and LDAP, but i can´t see in Stealthwatch GUI the HOST NAME (LDAP).I attach an example of the GUI as I see Steal...
Resolved! Stealthwatch DB Backup
Getting a successful backup via SMB Fileshare is becoming a challenge. I don't see anywhere that there are other options - sftp/scp, etc... Has development looked at enhancements? We are running 7.2 Thanks,Bob
The SMC remains in the Installing state. It has been in the same state for more than two days. I restarted the SMC but still with that problem, in the log file I do not see that the update process has begun. Log:Mon Jan 13 2020 12:20:01 GMT-0600 (hor...
