I have installed SNA 7.5.1 in my lab. I have SMC, Flow Collector, Sensor and Data store VMs. I have enabled ETA on network devices and I cannot find where to look for information regarding ETA in SMC. As I found out in older versions of SNA there whe...
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
Resolved! Backup restore stealthwatch
While restoring the backup of stealthwatch (SNA) to a new device, the new appliances (collector, sensor etc) serial numbers are different. Will the restore work in this case.
Hi Expert,My customer have used Cisco SNA (Stealthwatch) and they just buy new switch using Aruba CX which do not support Netflow (IPFIX support but for limited capability). I just thought after researched several info that Cisco SNA also able to mir...
While booting SNA Flow collector for first it's showing "The model is unregistered". How to resolve this.I have attached a screenshot with this.
Hello everbody,After install Cisco ISE Passive Identity Connector on vmware esxi 6.7 with requirements 8 core,32 gig ram, and 250 storage faced issue probing edd (edd=off to disable)... ok, with boot select [2] Cisco ISE-PIC Installation (Serial Co...
Recently I found that my Security Network Analytics (with last update-smc-ROLLUP20240709-7.5.0) doesn't add new exporter. For example I have 132 exporters for 3 Netflow collectors, I configured new device (c8200) for export netflow and realized that ...
In my organization we are using stealth watch for NW monitoring.I'm new on this toolThere's a confusion regarding interface speedsAt interfaces tab it shows the if-xxx link speed is 1Gbps is the maximum bandwidth the interface is capable ofbut at the...
Uploaded the Trusted CA Root certificate to the "Trust Store" in the SMC. Then I generated a CSR from the SMC "Additional SSL/TLS Client Identities" and signed it by the CA server "Windows server", but when I upload the new signed certificate and cli...
Hello, Based on the ordering guide of SNA TI license is per collector. However there are a few options L-LC-TI-FC1K= -Use this PID for virtual Flow Collectors that are (or will be) configured as a FC1K for very small deployments L-LC-TI-FC2K= -Use th...
Hello,Stealthwatch 7.5.0 build 20240515.1517-6a87cd40f812-0.I am encountering some really odd flows in Stealthwatch, such as this one. Just look at the bytes and bandwidth: 1.45TB (12.78Tbps). That is really fast! Not to mention that there are no pac...
Hi, i have SNA ver 7.4 with one flow collector and i have no issue for sending flow traffic to collector except with Nexus 5600 switches.i have configured N5k as Nexus 5600 configuration guide for netflow. in SNA in exporters i cant see my Nexus 5600...
Hi, Just asking to see if there is anything to do with SMC stuck in initializing after power-failure? Seems 100 year backwards to lock troubleshooting out for customers and engineers behind a TAC-challenge. I should never have upgraded to 7.5.x i kne...
Resolved! Migration to Data Store
Hi,Is it possible to migrate an existing SNA deployment where all the components are virtual to the Data Store architecture?Regards
I am reading the Cisco Stealthwatch Desktop Client User Guide and the following section about the Variance-based alarms Never trigger alarm when less than: Also known as the minimumthreshold, this is a static value that indicates the lowest value to ...
What does it mean? - flow collector longest export exceeded I have some allarms like that for my devices, maybe I need to increase intervals for monitor or exporter?
