Hi All, We have installed the StealthWatch in our environment to collect traffic via both Netflow and SPAN from core switch. But it's very strange is that no MAC address shown in the console. Is there any configuration required to be modified on St...
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
Hello, How can we reset the password of the admin account that is used to login to GUI of flow-sensor ? Any script or linux file to manipulate ? Thanks.
Can someone please share the links for documentation of Stealthwatch integration with Cognitive Threat Analytics and Threat Intelligence Feed ?
Sounds like a silly question - but I just deployed a virtual Endpoint Concentrator, powered it up, but I am unable to log into the thing. None of the username/passwords listed in the configuration guides are working - I have tried:sysadmin/lan1copesy...
I try to setup tacacs profiles on cisco ise for return attibure to stealthwatch login but stealthwatch not enter to dashboard page after enter username and password at stealthwatch login page and Cisco ISE TACACS+ Live log show that this user authent...
Hi All,We are going to update .iso image file of lancope flowsensor appliance 1010.But we have face an issue with boot manager setup Password for this appliance (model:PowerEdge R220). Please any one can share what is the default setup password for ...
Stealthwatch 7.0 Hi All, how do i set email alert on alarm/trigger that is shown on the stealthwatch dashbboard. Reason being that administrator does not login to stealthwatch 24/7 or monitor the dashboard realtime Appreciate any advise
Morning,I would like to have the full list of Confirmed Threat IDs for CTA.I know there have been 8 new Confirmed Threat IDs recently.Thank you.
I apologize if this has been asked/answered - but I am looking for answers on the inter-dependencies of ETA/Cognitive Intelligence, and most specifically the SLIC feed. We are purchasing new flow sensors with anticipation of taking advantage of the...
Hi, Im running StealthWatch 7.0.2, my collector is getting data from FlowSensor and from ASA, I have also ISE-PIC, everything is working except Endpoint Concentrator, which is also sending data to collector(I have verified via tcpdump), but data are ...
Where can I download the Endpoint Concontrator for VMware? Doesn't appear to be on Cisco's download site. -Thanks
Resolved! Stealthwatch - Local TZ vs UTC
Good morning, we are in the middle of deploying Stealthwatch 7.0 I would like to schedule a report - Suspect Long Flows Alarms for example When I view the alarms in the in the Java client - the times reflect local timezone information - yet when the ...
Hello, everyone,are there anyone share the similar symptoms that the SMC can't correctly display traffic and flow data like the screenshots below:SMC version: 7.0FlowCollector version: 7.0 Below is the web console of the FlowCollector I used in the ...
lately, I test the Stealthwatch API. when i tested the request of top host, i can not receive the any data if i set the time under 9 hour i received the data only when i set the time over 9 hour. body of query is very simple {"startTime":"2019...
I am planning to deploy SMC and FC demo version on free VMware ESXi on a customer site but according to cisco official doc for Stealtwatch you should use ISO for ESXi and I have the ovf files downloaded from Cisco. Anyone with similar experience tha...
