Hello everyone,
I understand that FlowSensor can provide "additional security context" by enabling the "Export HTTP(S) Header Data", "Export Packet Payload" and "Enable VXLAN Decapsulation".
1) Does that mean all the Stealthwatch Default Application shown in the following document? Or do I need the Endpoint Concentrator?
https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/management_console/default_applications_definitions/SW_7_3_Default_Applications_Definitions_DV_1_0.pdf
2) Must I turn off the netflow exporter for a switch if it is configured with RSPAN to forward all frames of the switch to the FlowSensor port?
Thanks in advance.
