Security Analytics

Hi all.  We're deploying StealthWatch system in our network especially EPC virtual appliance (7.1.1 2019.07.31.1620-0) but seems like it is not receiving flows from the AnyConnect Agent to the collector.   Cisco offers some kind of troubleshooting gu...

Hello,   How can we reset the password of the admin account that is used to login to GUI of flow-sensor ? Any script or linux file to manipulate ?     Thanks.

Hello Experts, I want to utilize existing hardware for Stealthwatch Enterprise deployment. We have UCS 5108 with B200 M5 Servers. I am following below link for the Virtual Server sizing: https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch...

I have a situation in which I am trying to determine what process is generating periodic UDP Netbios traffic from several workstations destined to a non-DC server. This traffic is getting blocked by my firewall, so the traffic is only observed leavin...

 I change NTP server and reboot Stealthwatch management console after that web console write:"Stealthwatch is initializing, please wait" long time. I start troubleshooting and  find that database Vertica doesn`t start. Vertica log file: "<Warning Abo...

As i understand, Proxywatch feature should correlate the external proxied IP/port with the real client IP/port, so that we get to know the real user IP that corresponds to a specific proxied access as seen from outside the proxy.   I am using WSA wit...

Hi All,   We have installed the StealthWatch in our environment to collect traffic via both Netflow and SPAN from core switch. But it's very strange is that no MAC address shown in the console. Is there any configuration required to be modified on St...

Hello, How can we reset the password of the admin account that is used to login to GUI of flow-sensor ? Any script or linux file to manipulate ?   Thanks.

Can someone please share the links for documentation of Stealthwatch integration with Cognitive Threat Analytics and Threat Intelligence Feed ?

I try to setup tacacs profiles on cisco ise for return attibure to stealthwatch login but stealthwatch not enter to dashboard page after enter username and password at stealthwatch login page and Cisco ISE TACACS+ Live log show that this user authent...

Hi All,We are going to update .iso image file of  lancope flowsensor appliance 1010.But we have face an issue with boot manager setup Password for this appliance (model:PowerEdge R220). Please any one can share what is the default setup password for ...

Stealthwatch 7.0 Hi All, how do i set email alert on alarm/trigger that is shown on the stealthwatch dashbboard.  Reason being that administrator does not login to stealthwatch  24/7 or monitor the dashboard realtime   Appreciate any advise