cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1829
Views
0
Helpful
1
Replies
Highlighted
Beginner

Stealthwatch netflow direction question

So I have a question regarding the netflow direction.  All the guides that I have seen only show the input direction.  Are you suppose to create 2 flow monitors, one in the input and one in the output?  Could someone please enlighten me on this?

Everyone's tags (1)
1 REPLY 1
Highlighted
VIP Mentor

Re: Stealthwatch netflow direction question

Netflow you can define how the flows to be sent to Stealthwatch. Stealth watch only read the flows and do analysis based on the input.

 

https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/netflow/Cisco_NetFlow_Configuration.pdf

 

https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/netflow/config-trouble-netflow-stealth.pdf

 

 

BB
*** Rate All Helpful Responses ***