Network Monitoring Appliances

The Cisco Stealthwatch™ system provides industry-leading network visibility and security intelligence for faster, more precise threat detection, incident response, and forensic analysis.

Cisco Stealthwatch's ability to provide extended visibility helps you gain better insight into activities occurring within your network. You can scale this visibility into the cloud, across the network, at branch locations, in the data center, and down to endpoints.

At the core of the Cisco Stealthwatch system are the Flow Collector, Flow Sensor, and Management Console. Additional licenses for added functionality are available. Please review the individual data sheets about these licenses for more detailed information.

• Cisco Stealthwatch Cloud License: extends visibility to public, private, and hybrid cloud environments
• Cisco Stealthwatch Endpoint License: extends visibility to the endpoint
• Cisco Stealthwatch Learning Network License: extends visibility to the branch using Cisco® Integrated Service Routers (ISRs)
• Cisco Stealthwatch Proxy License: extends visibility to proxy servers

• Real-time threat detection
• Incident response and forensics
• Network segmentation
• Network performance and capacity planning
• Ability to satisfy regulatory requirements

The Cisco DNA Traffic Telemetry Appliance is a telemetry sensor platform that is used to generate telemetry from mirrored IP network traffic and share it with Cisco DNA Center for application and endpoint analytics. Network traffic is received from switches and routers via Switched Port Analyzer (SPAN) mirroring and fed into the Cisco DNA Traffic Telemetry Appliance mirroring interfaces. The appliance analyzes the received traffic to produce a telemetry stream for Cisco DNA Center that is sent via the appliance's network interface.

The platform supports 20-Gbps sustained forwarding data traffic through the chassis and comes in a 1-RackUnit (1RU) form factor. The appliance has six built-in 1-Gbps Small Form Factor (SFP)-only interfaces (these do not support SFP+), and two built-in 10-Gbps Enhanced SFP (SFP+) interfaces (these support only the 10-Gbps rate) that support Synchronous Ethernet (SyncE). The device comes with one copper Ethernet 10/100/1000 Mbps network management port and supports storage extension through the network interface module (NIM) slot.

Features and benefits

The Cisco DNA Traffic Telemetry Appliance complements endpoint and application analytics solutions on Cisco DNA Center. The fixed, 1RU form factor and Cisco IOS® XE software-based device management make it an easy fit into existing network deployments. Cisco DNA Center manages the appliance in a manner similar to the way it manages network devices such as switches and wireless devices.