Hello, I'm was wondering when applying the netflow monitor commands to an Access port will I still get flow data about the layer 3 traffic passing through ? I ask this question as I noticed that DNAC puts the flow monitor commands on all access ports...
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
Hi there,My SNA (stealthwatch) has a Manager, a FC and one Data Store. SNA version is 7.4.1.After the power failure the Manager stuck in initializing. FC & DataStore seems to work fine. Database is UP. I can't ask TAC to help me because I am using a ...
Hi Guys, I use FMC1600-K9, version：6.6.4, and FTD: FPR2130-NGFW-K9My FTD(10.131.175.35) can NOT ping the direct connection interface IP(10.131.175.34) which is my gatewaybut it is pingable after I do "clear arp" on FTD, it could be pingable for abo...
Hello Cisco Security Analytics Community,Has anyone been able to download packet capture files in the .pcap format, from the Secure Analytics management center? I am looking to do so, for packets that were involved in past alarms that have triggered ...
Hello, we have Stealthwatch (Secure Network Analytics) with the latest version 7.4.1. A few days after upgrade, Global threat widget stopped work and an error occured: Unable to load the global threat alerts widget. When we tried to open Dashboards >...
Hello, I have ASR 1002-HX running on 17.3.5 (currently recommended software version). The problem is that ETA commands can't be applied on the router. From Cisco Feature Navigator I can see that ETA is supported on the ASR 1002-HX platform only on so...
Hi ppl, I've just installed SNA in a small environment where I have only ASA as a Netflow (NSEL) source. This ASA also provides NAT for this network.As I classify inside IPs as a DMZ, Inside, WiFi and/or Function Host Groups there is a question on cl...
Hi community, I am looking to upgrade an old version 6.9 of hardware SMC 2200/ FC 4200 to a recent one. I know there is a strict upgrade path that needs to be followed as per the documentation. But what if the data is not needed or possible to be del...
Hello, Is unclear if we should disable baseline for dhcp users , can someone please help me to understand what should be configured?
Has Stealthwatch Cloud alerting changed? For example, I’m trying to review an alert that triggered. Normally, to see the network events associated, there used to be a blue clickable link at the TimeDate and that would bring up the specific network de...
I have stealthwatch 7.3.2 smc and 3 flow collectors for netflow with licenses for all products. SMC and all FC's has conectivity with all Publics IP of Cisco Talos Address and port services. Despite, when I try to generate a report in Talos for any h...
Hi everyone I have a doubt about this appliance and its upgradeI follow the guide steps but these 2 names me confused, back Up Databases for the SMC (Manager) and Flow Collector vs Back Up Data Store. It's not the same thing ?, I did the backup data...
Now, i hope to test that upgrade the stealtwatch to v7.1.1 from v7.0.0i completed that applied the last patch in v7.0.0.but when i upload the update file in the SMC, i had the fail if you know for this reason, please help me
If we have a UDP director replicating flows to two flow collectors, it would still mean 2x flow rate licenses are consumed right? Since this is flow rate is determined by flows received on the flow collectors. So really, there is no difference having...
Hi everyoneI recently upgraded my stealthwatch to version 7.4 and now I detected that the data of interfaces is blank."No data to display"Can you help about the root cause o someone already had the same problem?Thanks you so much
