Hi Guys We've got Stealthwatch Enterprise up and running and so far I have to say I'm really liking it but we are having some issues with flow matching which results in a lot of traffic being picked up as being a new flow instead of being part of nor...
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
Hi!I have a question, because I want to integrate StealthWatch with Cisco Threat Response, but one of the prerequisite is that the Stealtwatch version needs to be 7.1.2, Nevertheless when I go to https://lancope.flexnetoperations.com/ > Downloads>Upg...
Hello everyone.On the page "https://lancope.flexnetoperations.com/control/lncp/content?partnerContentId=Home", "Stealthwatch Release 7.1.19/23/2019-The 7.1.1 software release is temporarily unavailable for download. ".what should I do?
I am a Cisco Stealthwatch User with few UDP Directors. I am trying to import the XML file of the Forwarding Rules and looking to update all of the UDP Directors at once and within that script, i am also looking to sync the directors. I have been sear...
Hi,I'm new in stealthwatch so I don not if this is a normal behavior.Stealthwatch report an peer IP address that do not exist.The NetFlow sensor is a cisco ASA. The packet tracer on ASA do not report any communication with theIP address dsiplayed by ...
Hello Cisco Community,we have a little problem in our company with sending netflow data from the Cisco Prime NAMs to Stealtwatch. There is any documentation for this topic, but we thought that it should be possible to use the NAMs as exporters for St...
I have a scenario where in the Core Switch (6500) is running only as Layer 2. And this switch is connected to a Firewall via trunk links. Behind the core switch is access switches on where the user and server farm is connected. The server's/user's ga...
Hello everyone.On my "stealthwatch management console ve" device, an "Error retrieving data. 500: internal server error" error message appears on the page "https://192.168.1.11/smc/index.html".How can I handle this error?
Hi All Does anyone know if the Lancope Stealthwatch Customer Community is still up and running?I've been attempting to register but never receive a response (although I get the mail saying ill receive one in 72 hours) and theres no contact areas that...
Hi all, Is it available on Stealthwatch 7 Client or web interface the ability to import the Netflow Exporters names? I found only the possibility to configure manually the name of each Netflow Exporter, but not a bulk configuration.
Is it possible to have information about the compatibility between smc v7 and Microsoft Active Directory? Particularly, is it compatible with Microsoft AD 2016?
Hello, I wish you could help me. I have a client with Stealthwatch (v6.10.3), in their environment there are a SMC, FC and a FS, but when I check the System visibility on the SMC, I only see the SMC and the FC (not FS). In the SMC javascript (license...
Resolved! Stealthwatch Reporting
Anyone know if any 3rd party reporting solutions are compatible with Stealthwatch? Crystal reports for example?Reporting in stealthwatch is awful - doesn't exist at all in the Web UI, and very limited in the Java client w/ no customization options.
Hi all. We're deploying StealthWatch system in our network especially EPC virtual appliance (7.1.1 2019.07.31.1620-0) but seems like it is not receiving flows from the AnyConnect Agent to the collector. Cisco offers some kind of troubleshooting gu...
Hello, How can we reset the password of the admin account that is used to login to GUI of flow-sensor ? Any script or linux file to manipulate ? Thanks.
