Security Analytics

cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Cisco CyberSecurity


Welcome to the Security Analytics Board!

Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.

Forum Posts

as Cisco Stealthwatch Learning Network License Configuration Guide, Version 1.1 - Introduction [Cisco Stealthwatch Learning… says:"Active LearningAs a user, you can review the reported anomalies from the controller web UI. You have the option of assi...

lin jia by Level 1
  • 1155 Views
  • 3 replies
  • 0 Helpful votes

What are the parameters other than CPU, Memory and Storage that should be monitored on Stealthwatch in order to do capacity planning effectively. Following are been deployed int the production environment FlowCollector for NetFlow 4000FlowReplicator ...

kmittal by Cisco Employee
  • 2458 Views
  • 4 replies
  • 0 Helpful votes

Hi ThereI have a few ASR55XX/ASR5000 boxes (StarOS) that do not support Netflow or Telemetry flows. They do however generate Syslog entries that provide insight into "who" logged in, "what time" the person logging in, "source ip" of the device used t...

deepagup by Cisco Employee
  • 1130 Views
  • 0 replies
  • 0 Helpful votes

Condition:    Type:                                  FlowCollector Management Channel Down    Severity:                           Major Description:                         Details:                              HTTP Authorization Error (HTTP/1.1 401 ...

There is a simple guide to integrate ISE with CTA when using WSA, but it is dependent on logging into a CTA cloud account. This account does not seem to be present when using CTA with SW.How do I set CTA endpoint flags in ISE when using SW?

marklevi by Cisco Employee
  • 1434 Views
  • 3 replies
  • 0 Helpful votes