Hello, I am testing SNA (Stealthwatch) in my lab (ESXi). I have installed version 7.5.1 - SMC, Flow Collector, Flow Sensor, Data Store. I want to test Flow sensor. I have added additional interface for SPAN traffic. I have enabled "ERSPAN Decapsulati...
after upgrading to version 7.5 Cisco Security Network Analytics shows empty in Update Manager is it normal?
Hi teamCisco Firepower 2110 Security Appliance(FPR-2110 V02)The firewall reports high CPU usage. How should this alarm be handled?
I have installed SNA 7.5.1 in my lab. I have SMC, Flow Collector, Sensor and Data store VMs. I have enabled ETA on network devices and I cannot find where to look for information regarding ETA in SMC. As I found out in older versions of SNA there whe...
While restoring the backup of stealthwatch (SNA) to a new device, the new appliances (collector, sensor etc) serial numbers are different. Will the restore work in this case.
Hi Expert,My customer have used Cisco SNA (Stealthwatch) and they just buy new switch using Aruba CX which do not support Netflow (IPFIX support but for limited capability). I just thought after researched several info that Cisco SNA also able to mir...
While booting SNA Flow collector for first it's showing "The model is unregistered". How to resolve this.I have attached a screenshot with this.
Hello everbody,After install Cisco ISE Passive Identity Connector on vmware esxi 6.7 with requirements 8 core,32 gig ram, and 250 storage faced issue probing edd (edd=off to disable)... ok, with boot select [2] Cisco ISE-PIC Installation (Serial Co...
Recently I found that my Security Network Analytics (with last update-smc-ROLLUP20240709-7.5.0) doesn't add new exporter. For example I have 132 exporters for 3 Netflow collectors, I configured new device (c8200) for export netflow and realized that ...
In my organization we are using stealth watch for NW monitoring.I'm new on this toolThere's a confusion regarding interface speedsAt interfaces tab it shows the if-xxx link speed is 1Gbps is the maximum bandwidth the interface is capable ofbut at the...
Uploaded the Trusted CA Root certificate to the "Trust Store" in the SMC. Then I generated a CSR from the SMC "Additional SSL/TLS Client Identities" and signed it by the CA server "Windows server", but when I upload the new signed certificate and cli...
Hello, Based on the ordering guide of SNA TI license is per collector. However there are a few options L-LC-TI-FC1K= -Use this PID for virtual Flow Collectors that are (or will be) configured as a FC1K for very small deployments L-LC-TI-FC2K= -Use th...
Hello,Stealthwatch 7.5.0 build 20240515.1517-6a87cd40f812-0.I am encountering some really odd flows in Stealthwatch, such as this one. Just look at the bytes and bandwidth: 1.45TB (12.78Tbps). That is really fast! Not to mention that there are no pac...
Hi, i have SNA ver 7.4 with one flow collector and i have no issue for sending flow traffic to collector except with Nexus 5600 switches.i have configured N5k as Nexus 5600 configuration guide for netflow. in SNA in exporters i cant see my Nexus 5600...
