Security Analytics

Hi Expert,My customer have used Cisco SNA (Stealthwatch) and they just buy new switch using Aruba CX which do not support Netflow (IPFIX support but for limited capability). I just thought after researched several info that Cisco SNA also able to mir...

While booting SNA Flow collector for first it's showing "The model is unregistered". How  to resolve this.I have attached a screenshot with this.

Hello everbody,After install Cisco ISE Passive Identity Connector on vmware esxi 6.7 with requirements 8 core,32 gig ram, and 250 storage faced issue  probing edd (edd=off to disable)... ok, with boot select  [2] Cisco ISE-PIC Installation (Serial Co...

Recently I found that my Security Network Analytics (with last update-smc-ROLLUP20240709-7.5.0) doesn't add new exporter. For example I have 132 exporters for 3 Netflow collectors, I configured new device (c8200) for export netflow and realized that ...

In my organization we are using stealth watch for NW monitoring.I'm new on this toolThere's a confusion regarding interface speedsAt interfaces tab it shows the if-xxx link speed is 1Gbps is the maximum bandwidth the interface is capable ofbut at the...

Uploaded the Trusted CA Root certificate to the "Trust Store" in the SMC. Then I generated a CSR from the SMC "Additional SSL/TLS Client Identities" and signed it by the CA server "Windows server", but when I upload the new signed certificate and cli...

Hello, Based on the ordering guide of SNA TI license is per collector. However there are a few options L-LC-TI-FC1K= -Use this PID for virtual Flow Collectors that are (or will be) configured as a FC1K for very small deployments L-LC-TI-FC2K= -Use th...

Hello,Stealthwatch 7.5.0 build 20240515.1517-6a87cd40f812-0.I am encountering some really odd flows in Stealthwatch, such as this one. Just look at the bytes and bandwidth: 1.45TB (12.78Tbps). That is really fast! Not to mention that there are no pac...

Hi, i have SNA ver 7.4 with one flow collector and i have no issue for sending flow traffic to collector except with Nexus 5600 switches.i have configured N5k as Nexus 5600 configuration guide for netflow. in SNA in exporters i cant see my Nexus 5600...

Hi, Just asking to see if there is anything to do with SMC stuck in initializing after power-failure? Seems 100 year backwards to lock troubleshooting out for customers and engineers behind a TAC-challenge. I should never have upgraded to 7.5.x i kne...

What does it mean? - flow collector longest export exceeded I have some allarms like that for my devices, maybe I need to increase intervals for monitor or exporter?

Dear, I would like to ask if it is possible to make automatic reports in SNA. Currently we generate reports manually, but our client wants to automate them.There is the mentioned process, can you share information with me, I remain attentive thanks.