Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi everyone,Having some .CSE rules when high amount of data Is leaving a internal network. Having alot of false positives related to this. And I'm wondering If It's possible in some way to exclude a specifik "Subject Payload" field?That "Subject Payl...
Hi allExperiencing Issues with creating Custom Security Events towards NVM (nvzflows) In my SNA platform.Been creating a test Custom Security Event, just to see If it triggers."CSE: Forbidden Application"When any subject host; using the process "well...
HelloIs everyone here having experience with the NVM-module, that Is possible to have within the Secure Client?How does SNA handles large amount of NVM-flows? Lets say between 5K -> 10K clients.Ideally Is It worth setting up a dedicated Flow Collecto...
Hi everyone,I've a question regarding the "Analytics" function that Is available to enable in the Secure Network Analytics platform, on the Manager.Before enabeling the function Cisco informs about "heavy load", minimum requirements etc etc. But noth...
Hi! I have been encountered the following message "Potential CSRF attack detected". I've tried to reconfigure the SAML within the ASA, but It doesn't help. I'm using the AnyConnect software and everything seems to be working fine when I'm authenticat...
Okey. So what you are saying Is that It's not possible to create "Custom Security Events" towards NVM telemetry data?My NVM-module configuration Is only for endpoints that are on a "trusted network".I actually got some hits today in my "Security Insi...
I see. But around 2K Is very very far away from 100.00K hosts that my Flow Collector can inspect/analyze. Seen some weird log messages In my flow collector recently,"flow collector longest export exceeded"Seems like It is related to high volume traff...
Sorry, I wrote wrong on the dimensions. I have 400 GB disk allocated.Supports up to 100.000 internal hosts.Is It possible in the UI to see how many internal hosts my SNA monitors? Under "Investigate" -> "Hosts" --> It says a bit 2K hosts.
