cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
909
Views
5
Helpful
2
Replies
Highlighted
Beginner

Stealthwatch Proxy Ingestion License

Hi all,

 

Does the proxy ingestion license still exist in Stealthwatch or are the following licenses the only ones available now:

 

- Flow rate license

- Endpoint license

- PNM

- PCM

 

Thanks

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Re: Stealthwatch Proxy Ingestion License

What was the proxy ingest license is now included in the Stealthwatch license.  

 

A Flow rate License is still needed.  

 

An 'Endpoint License' is needed to process IPFIX from Stealthwatch Endpoint Concentrators.  Those Endpoint Concentrators take in nzFlow from the Cisco AnyConnect NVM (Network Visibility Module) Agent (which is included with the AnyConnect Plus license).  Note that nzFlow needs to be stitched into a connection for which NetFlow or IPFIX is available from a router, switch, or Flow Sensor and adds detail about connections that originate on that AnyConnect equipped client.

 

PNM (Private Network Monitoring) is a Stealthwatch Cloud license that is based on the number of devices being reported by a Stealthwatch Cloud Sensor. 

 

PCM (Public Cloud Monitoring) is a. Stealthwatch Cloud license that is counted based on EMF (Effective Mega Flow); a measure of the data being reported by one or more public cloud (Azure, AWS, GCP) accounts to a Stealthwatch Cloud portal.

Brian Ford | brford@cisco.com | brford@yahoo.com | 51 75 61 6c 69 74 79 20 6d 65 61 6e 73 20 64 6f 69 6e 67 20 69 74 20 72 69 67 68 74 20 77 68 65 6e 20 6e 6f 20 6f 6e 65 20 69 73 20 6c 6f 6f 6b 69 6e 67 2e | Email me when you figure this out.

View solution in original post

2 REPLIES 2
Highlighted
Cisco Employee

Re: Stealthwatch Proxy Ingestion License

What was the proxy ingest license is now included in the Stealthwatch license.  

 

A Flow rate License is still needed.  

 

An 'Endpoint License' is needed to process IPFIX from Stealthwatch Endpoint Concentrators.  Those Endpoint Concentrators take in nzFlow from the Cisco AnyConnect NVM (Network Visibility Module) Agent (which is included with the AnyConnect Plus license).  Note that nzFlow needs to be stitched into a connection for which NetFlow or IPFIX is available from a router, switch, or Flow Sensor and adds detail about connections that originate on that AnyConnect equipped client.

 

PNM (Private Network Monitoring) is a Stealthwatch Cloud license that is based on the number of devices being reported by a Stealthwatch Cloud Sensor. 

 

PCM (Public Cloud Monitoring) is a. Stealthwatch Cloud license that is counted based on EMF (Effective Mega Flow); a measure of the data being reported by one or more public cloud (Azure, AWS, GCP) accounts to a Stealthwatch Cloud portal.

Brian Ford | brford@cisco.com | brford@yahoo.com | 51 75 61 6c 69 74 79 20 6d 65 61 6e 73 20 64 6f 69 6e 67 20 69 74 20 72 69 67 68 74 20 77 68 65 6e 20 6e 6f 20 6f 6e 65 20 69 73 20 6c 6f 6f 6b 69 6e 67 2e | Email me when you figure this out.

View solution in original post

Highlighted
Beginner

Re: Stealthwatch Proxy Ingestion License


@brford wrote:

What was the proxy ingest license is now included in the Stealthwatch license.  

 

A Flow rate License is still needed.  

 

An 'Endpoint License' is needed to process IPFIX from Stealthwatch Endpoint Concentrators.  Those Endpoint Concentrators take in nzFlow from the Cisco AnyConnect NVM (Network Visibility Module) Agent (which is included with the AnyConnect Plus license).  Note that nzFlow needs to be stitched into a connection for which NetFlow or IPFIX is available from a router, switch, or Flow Sensor and adds detail about connections that originate on that AnyConnect equipped client.

 

PNM (Private Network Monitoring) is a Stealthwatch Cloud license that is based on the number of devices being reported by a Stealthwatch Cloud Sensor. 

 

PCM (Public Cloud Monitoring) is a. Stealthwatch Cloud license that is counted based on EMF (Effective Mega Flow); a measure of the data being reported by one or more public cloud (Azure, AWS, GCP) accounts to a Stealthwatch Cloud portal.


Hi Brford,

I am using SWE 7.1.2 and I do have  base+flow rate licenses, but when I am trying to integrate my WSA with Flow Collector I am unable to do it, because of lack of license.

 

Are you sure about proxy license?