I have a scenario where in the Core Switch (6500) is running only as Layer 2. And this switch is connected to a Firewall via trunk links. Behind the core switch is access switches on where the user and server farm is connected. The server's/user's ga...
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
Hello everyone.On my "stealthwatch management console ve" device, an "Error retrieving data. 500: internal server error" error message appears on the page "https://192.168.1.11/smc/index.html".How can I handle this error?
Hi All Does anyone know if the Lancope Stealthwatch Customer Community is still up and running?I've been attempting to register but never receive a response (although I get the mail saying ill receive one in 72 hours) and theres no contact areas that...
Hi all, Is it available on Stealthwatch 7 Client or web interface the ability to import the Netflow Exporters names? I found only the possibility to configure manually the name of each Netflow Exporter, but not a bulk configuration.
Is it possible to have information about the compatibility between smc v7 and Microsoft Active Directory? Particularly, is it compatible with Microsoft AD 2016?
Hello, I wish you could help me. I have a client with Stealthwatch (v6.10.3), in their environment there are a SMC, FC and a FS, but when I check the System visibility on the SMC, I only see the SMC and the FC (not FS). In the SMC javascript (license...
Resolved! Stealthwatch Reporting
Anyone know if any 3rd party reporting solutions are compatible with Stealthwatch? Crystal reports for example?Reporting in stealthwatch is awful - doesn't exist at all in the Web UI, and very limited in the Java client w/ no customization options.
Hi all. We're deploying StealthWatch system in our network especially EPC virtual appliance (7.1.1 2019.07.31.1620-0) but seems like it is not receiving flows from the AnyConnect Agent to the collector. Cisco offers some kind of troubleshooting gu...
Hello, How can we reset the password of the admin account that is used to login to GUI of flow-sensor ? Any script or linux file to manipulate ? Thanks.
Hello Experts, I want to utilize existing hardware for Stealthwatch Enterprise deployment. We have UCS 5108 with B200 M5 Servers. I am following below link for the Virtual Server sizing: https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch...
I have a situation in which I am trying to determine what process is generating periodic UDP Netbios traffic from several workstations destined to a non-DC server. This traffic is getting blocked by my firewall, so the traffic is only observed leavin...
Hi my name is Ivan, My customer have a Cisco UCS working with a lot of virtual servers in production (database's in cluster) and he needs to pass the traffic netflow in a ethernet port dedicated (10gb) to spread the rspan vlan from the switch core, a...
Resolved! Stealthwatch - License Migration process
Hello, is it available one procedure to migrate Stealtwatch virtual edition licenses between VMs? My company has buyed the following licenses: StealthWatch Management Console (SMC) Virtual Edition Base LicenseStealthWatch Flow Collector Virtual Editi...
I change NTP server and reboot Stealthwatch management console after that web console write:"Stealthwatch is initializing, please wait" long time. I start troubleshooting and find that database Vertica doesn`t start. Vertica log file: "<Warning Abo...
As i understand, Proxywatch feature should correlate the external proxied IP/port with the real client IP/port, so that we get to know the real user IP that corresponds to a specific proxied access as seen from outside the proxy. I am using WSA wit...
