Security Analytics

cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Cisco CyberSecurity


Welcome to the Security Analytics Board!

Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.

Forum Posts

Team, I have downloaded a SMC and i have a small network with netflow enabled devices, i need a trail license for Stealth-watch to test it and present it to my client can you help me to get this trail license?

Hi all,Can someone tell me is it possible to collect flows from exporters with a different NetFlow versions (in my case I have exporters with Netflow version 5 and version 9, and I am getting flows from sources configured with version 5). So far I di...

slobodanL by Level 1
  • 1085 Views
  • 1 replies
  • 1 Helpful votes

Hello all,I have a query from our customer, which have implemented Cisco Stealthwatch v.6.9.0, which consists of Flow Collector 4200 as a hardware appliance and SMC as a virtual machine. So far, Flow Collector collects flows from 4 Cisco Nexus 7700 s...

slobodanL by Level 1
  • 1253 Views
  • 1 replies
  • 1 Helpful votes

Resolved! Cisco Stealthwatch

Dear Friends, Can anyone explain me different between Flow Sensor and UDP Director ? Both appliances capture NetFlow traffic and send it to Flow Collector, but I don't understand why we must use both of it, In my opinion both of this appliances doing...

mikiNet by Level 1
  • 1789 Views
  • 1 replies
  • 0 Helpful votes

as Cisco Stealthwatch Learning Network License Configuration Guide, Version 1.1 - Introduction [Cisco Stealthwatch Learning… says:"Active LearningAs a user, you can review the reported anomalies from the controller web UI. You have the option of assi...

lin jia by Level 1
  • 1205 Views
  • 3 replies
  • 0 Helpful votes

What are the parameters other than CPU, Memory and Storage that should be monitored on Stealthwatch in order to do capacity planning effectively. Following are been deployed int the production environment FlowCollector for NetFlow 4000FlowReplicator ...

kmittal by Cisco Employee
  • 2537 Views
  • 4 replies
  • 0 Helpful votes

Hi ThereI have a few ASR55XX/ASR5000 boxes (StarOS) that do not support Netflow or Telemetry flows. They do however generate Syslog entries that provide insight into "who" logged in, "what time" the person logging in, "source ip" of the device used t...

deepagup by Cisco Employee
  • 1145 Views
  • 0 replies
  • 0 Helpful votes