I'm trying to setup netflow export on my Check Point firewall to my Stealthwatch flow collector, but it seems that the data isn't being accepted because the exported records are missing the mandatory "ipv4 tos" key value. I used https://configurenet...
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
Does Cisco Stealthwatch Flowsensor support forwarding IPFIX flows to Third-Party flow analytics tool?If it is possible, then where can I get Stealthwatch IPFIX "Private Enterprise Element Definition" to decode flows on the recipient end.I was success...
I am trying to make sure I got the right config.looking at thishttps://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/netflow/config-trouble-netflow-stealth.pdfI was looking at the 9300 config and it shows that netflow is enabled both inboun...
Hello, Is there a limitations on the number of read only users that can be created on stealthwatch, I have a requirement fo 30+ user accounts that are needed to be created.
Hi Everyone,suddenly when I has restored my config from VE edition to X210 edition and I restart the appliance, the smc login page is not came out.The config from VE edition still coming when I restore image and restore default config using sysadmin ...
I have an SMC, Flow Collector, and Flow Sensor VMs deployed. They are all on version 7.0. When I initially added the Flow Collector and Flow Sensor VMs to SMC I accepted the default self-signed SMC cert. I'm going to be replacing the SMC identity cer...
Hi Guys We've got Stealthwatch Enterprise up and running and so far I have to say I'm really liking it but we are having some issues with flow matching which results in a lot of traffic being picked up as being a new flow instead of being part of nor...
Hi!I have a question, because I want to integrate StealthWatch with Cisco Threat Response, but one of the prerequisite is that the Stealtwatch version needs to be 7.1.2, Nevertheless when I go to https://lancope.flexnetoperations.com/ > Downloads>Upg...
Hello everyone.On the page "https://lancope.flexnetoperations.com/control/lncp/content?partnerContentId=Home", "Stealthwatch Release 7.1.19/23/2019-The 7.1.1 software release is temporarily unavailable for download. ".what should I do?
I am a Cisco Stealthwatch User with few UDP Directors. I am trying to import the XML file of the Forwarding Rules and looking to update all of the UDP Directors at once and within that script, i am also looking to sync the directors. I have been sear...
Hi,I'm new in stealthwatch so I don not if this is a normal behavior.Stealthwatch report an peer IP address that do not exist.The NetFlow sensor is a cisco ASA. The packet tracer on ASA do not report any communication with theIP address dsiplayed by ...
Hello Cisco Community,we have a little problem in our company with sending netflow data from the Cisco Prime NAMs to Stealtwatch. There is any documentation for this topic, but we thought that it should be possible to use the NAMs as exporters for St...
I have a scenario where in the Core Switch (6500) is running only as Layer 2. And this switch is connected to a Firewall via trunk links. Behind the core switch is access switches on where the user and server farm is connected. The server's/user's ga...
Hello everyone.On my "stealthwatch management console ve" device, an "Error retrieving data. 500: internal server error" error message appears on the page "https://192.168.1.11/smc/index.html".How can I handle this error?
Hi All Does anyone know if the Lancope Stealthwatch Customer Community is still up and running?I've been attempting to register but never receive a response (although I get the mail saying ill receive one in 72 hours) and theres no contact areas that...
