About dlucas

View Active Anyconnect Users in FDM · 03-27-2020

Is there not a way to view current anyconnect users from the FDM? Not even just the total number of connected users? Seems like it would be a basic information that could easily be parsed from the vpn-sessiondb. I have a customer who would like to mo...

dlucas · 09-09-2019

Anyone know if any 3rd party reporting solutions are compatible with Stealthwatch? Crystal reports for example?Reporting in stealthwatch is awful - doesn't exist at all in the Web UI, and very limited in the Java client w/ no customization options.

dlucas · 09-05-2019

I have a situation in which I am trying to determine what process is generating periodic UDP Netbios traffic from several workstations destined to a non-DC server. This traffic is getting blocked by my firewall, so the traffic is only observed leavin...

dlucas · 09-04-2019

Sounds like a silly question - but I just deployed a virtual Endpoint Concentrator, powered it up, but I am unable to log into the thing. None of the username/passwords listed in the configuration guides are working - I have tried:sysadmin/lan1copesy...

dlucas · 08-23-2019

What is the purpose of Stealthwatch domains? What I was hoping it would do is isolate Flow Collectors, alarms, policies, etc., but it doesn't look like this is the case; at least in the Web UI. -Thanks

dlucas · 09-24-2020

Thanks for the response,I understand that part - what I am not understanding is what is it exactly probing when it says 'AWS'? Specific SaaS applications I understand because there are certain URLs that are being used like with Office365. But a gener...

dlucas · 02-26-2020

I believe the "Call Home List" is where you enter each ISE server's FQDN for connecting to - the 'Discovery Host' is used for the discovery probes, which is optional to enter one here since the posture agent by default sends discovery probes to the d...

dlucas · 09-13-2019

Doesn't appear to have made a difference - still not seeing the process name for some of the endpoint flows

dlucas · 09-10-2019

Looks like it supports SOAP api for 3rd part reporting compatibility:https://developer.cisco.com/docs/stealthwatch/#!why-use-these-apis/why-use-these-apis

dlucas · 09-10-2019

Thanks for the reply, "The Flows from an endpoint concentrator will be consumed and stitched only if they match with a related flow from a network device for the same conversation" if they don't they will be dropped." I see the flows from other devic...

Member Since	‎04-19-2018 12:38 PM
Date Last Visited	‎06-13-2024 01:31 AM
Posts	25

User Statistics

User Activity

View Active Anyconnect Users in FDM

Stealthwatch Reporting

Stealthwatch - Endpoint Concentrator - Process Name for Unidirectional Flows

Stealthwatch - Endpoint Concentrator VE 7.1.1

Stealthwatch Enterprise - Domains

Re: Cloud OnRamp SaaS - AWS

Re: CISCO ISE 2.4 Failover and Posture

Re: Stealthwatch - Endpoint Concentrator - Process Name for Unidirectional Flows

Re: Stealthwatch Reporting

Re: Stealthwatch - Endpoint Concentrator - Process Name for Unidirectional Flows