is there a way to reset all of the counters/data through the GUI in Stealthwatch? i have a different setup and want to see data only AFTER the new settings so that i can tell if it is actually working like it is supposed to.
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
Resolved! Stealthwatch SNA RRT SRT response times
Has anyone been able to get the response times values in Stealthwatch / SNA to populate? We're various Cisco switches and routers exporting netflow (most relevant here are Ciscp 3850 (16.9.5) and 9300 (16.9.7) and have followed the netflow config gu...
Anyone have idea what to do with this Vulnrability reported by a Vulscan service.this is for a cisco CBS 350 series switchthe switch is upgraded to latest frimware exist on cisco website , any idea how to fix this issue with open ssh7.4Summaryopenssh...
Has anyone tried to use the maxmind script provided here https://developer.cisco.com/codeexchange/github/repo/CiscoSE/MaxmindAsnImporter/ to import maxmind data into 7.4.1? Im using an instance in Dcloud and i get localhost MaxmindAsnImporter-maste...
Hi team, Differences have been observed between talos and SNA when they detect the country of origin of the traffic. For example, this IP 185[.]233[.]19[.]223 is from Pakistan and source host group from United States (according to SNA) but in talos i...
Hello,is there anyone who has already worked on the stealthwatch solution version 7.3.2.I am unable to find the option desktop client. how can i download the java client or "desktop client" since i can't find it on the top right of the screen, see th...
Hello, i have got issue about FMC have not alerts if i try to scan from the internal network? and also when i scan the internal network that is thier network packet passes through the firewall results in source ip address maps to other internal netwo...
Hello friends, I would like to update my Cisco Secure Network Analytics Virtual Manager, which is currently on version 7.3.1. However, I understand that Cisco Secure Network Analytics Virtual Manager 7.4.2 (the latest recommended version) is not comp...
Hi, I am trying to run stealthwatch API to get the security events from Python sample script (https://developer.cisco.com/docs/stealthwatch/enterprise/#!quick-start) however I am getting 400 errors. python3 get_security_events.py An error has occurre...
Hi,#I am looking to complete a new replacement stealthwatch deployment. The aim is to use a higher version 7.4 instead of 7.0 but essentially be configured exactly the same way.Am I able to setup the new stealthwatch on version on 7.4 and configure f...
Resolved! Stealthwatch Flow Sensor high CPU usage
Hi guys, The FS is capturing the traffic from the Switch with the help of the SPAN protocol. Few CPU cores show the CPU utilization close to 90%. This usage is in the range of 82%-90% always. So I just want to know if is this normal behavior or if I ...
Resolved! SNA Stealthwatch SLIC channel down
Hi all,I'm new in the communinty, thanks in advance for any help you'd like to provide me.My customer is using Secure Network Analytics version 7.4.2, the product have been licensed, also the license for Threat Intelligence is authorized but the alar...
How can CESA detect users using VPNs other than Cisco AnyConnect? Please let us know how to filter. I mean, want to identify users who use free VPN (Stray VPN) and their VPN products. Thank you in advance.
Hello, I have installed SNA 7.4 without data store. I have only SMC and FC. When I try to open Alerts or Analytics page I get redirected to Data Store page. Where can I enable Alerts and Analytics pages? Thanks in advance
