CISCO Secure Network Analytics Data Store User Manual

Data Store Update Patch for Cisco Secure Network Analytics (formerly Stealthwatch) v7.5.3
This document provides the patch description and installation procedure for the Cisco Secure Network Analytics Data Store appliance v7.5.3.

Make sure you read the Before You Begin section before you get started.

Patch Name and Size

Name: We changed the patch name so that it starts with “update” instead of “patch.” The name for this rollup is update-dnode-ROLLUP20251106-7.5.3-v2-01.swu.
Size: We increased the size of the patch SWU files. The files may take a longer time to download. Also, follow the instructions in the Check the Available Disk Space section to confirm you have enough available disk space with the new file sizes.

Patch Description

This patch, update-dnode-ROLLUP20251106-7.5.3-v2-01.swu, includes security fixes.

Previous fixes included in this patch are described in Previous Fixes.

Before You Begin

Make sure you have enough available space on the Manager for all appliance SWU files that you upload to Update Manager. Also, confirm you have enough available space on each individual appliance.

Check the Available Disk Space

Log in to the Appliance Admin interface.
Click Home.
Locate the Disk Usage section.
Review the Available (byte) column and confirm that you have the required disk space available on the /lancope/var/ partition.

Requirements

Requirement: On each managed appliance, you need at least four times the size of the individual software update file (SWU) available. On the Manager, you need at least four times the size of all appliance SWU files that you upload to Update Manager.

Managed Appliances: For example, if the Flow Collector SWU file is 6 GB, you need at least 24 GB available on the Flow Collector (/lancope/var) partition (1 SWU file x 6 GB x 4 = 24 GB available).
Manager: For example, if you upload four SWU files to the Manager that are each 6 GB, you need at least 96 GB available on the /lancope/var partition (4 SWU files x 6 GB x 4 = 96 GB available).

Specifications

Appliance	Patch File Size
Manager	6.07 GB
Flow Collector NetFlow	3.02 GB
Flow Collector sFlow	3.02 GB
Flow Collector Database	2.15 GB
Flow Sensor	3.13 GB
UDP Director	2.01 GB
Data Store	2.10 GB

Download and Installation

Starting with v7.5.1, the following two options are available for downloading software:

Manual Download: Download software from Cisco Software Central and upload it to your Update Manager.

Direct Software Downloads (Beta): Register with your cisco.com user ID (CCOID) and download software directly to your Update Manager.

Manual Download

Log in to Cisco Software Central, https://software.cisco.com.
In the Download and Upgrade area, choose Access downloads.
Type Secure Network Analytics in the Select a Product search box.
Choose the appliance model from the drop-down list, then press Enter.

Under Select a Software Type, choose Secure Network Analytics Patches.
Choose 7.5.3 from the Latest Releases area to locate the patch.
Download the patch update file, update-dnode-ROLLUP20251106-7.5.3-v2-01.swu, and save it to your preferred location.

Direct Software Downloads (Beta)
To use this Beta integration and download software and patch update files directly to your Update Manager, complete the following steps:

You will need to register with your cisco.com user ID (CCOID) before you can start using Direct Software Downloads. If you have already registered, you can skip to 3. View and Download Updates.

Open Update Manager
1. Log in to the Manager.
2. From the main menu, choose Configure > Global > Central Management.
3. Click the Update Manager tab.

Register for Direct Software Downloads
If you have already registered, skip to 3. View and Download Updates.
1. Click the Direct Software Downloads link to open the registration page.
2. Click the Register button to begin the registration process.
3. Click the link that is provided.
4. You will be taken to the Activate Your Device page. Click Next to continue.
5. Log in with your cisco.com user ID (CCOID).
6. You will receive a “Device Activated” message once your activation is complete.
7. Go back to the Direct Software Downloads page on your Manager and click Continue.
8. Click the links for the EULA and K9 agreements to read and accept the terms. Once the terms are accepted, click Continue.

View and Download Updates
1. Click the Check for Updates button to check for any available updates.
2. Click the PREVIOUS RELEASES link to view and download previous patches and updates.
3. To download an update or patch click the Download All button. Once the download is complete, you will be given the option to return to the Update Manager to continue the update process. Click the Go to Update Manager button to continue the update process.

Installation

To install the patch update file, complete the following steps:

Log in to the Manager.
From the main menu, choose Configure > Global > Central Management.
Click the Update Manager tab.
On the Update Manager page, click Upload, and then open the saved patch update file, update-dnode-ROLLUP20251106-7.5.3-v2-01.swu.
In the Actions column, click the (Ellipsis) icon for the appliance, then choose Install Update.

The patch restarts the appliance.

Previous Fixes
The following items are previous defect fixes included in this patch:

Rollup 20250930

CDETS Description

CSCwr64349
Unknown files are created in catalogue directory during VBR restoration when FIPS or CC mode is enabled
CSCwq44396
Internode broadcast encryption and Data Store expansion fail after adding a Data Store node with Private LAN Encryption enabled

Contacting Support
If you need technical support, please do one of the following:

Contact your local Cisco Partner
Contact Cisco Support
To open a case by web: http://www.cisco.com/c/en/us/support/index.html
For phone support: 1-800-553-2447 (U.S.)
For worldwide support numbers: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html

Copyright Information
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: https://www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1721R)

FAQ

What is the patch name for this update?

The patch name for this update is update-dnode-ROLLUP20251106-7.5.3v2-01.swu.

Documents / Resources

CISCO Secure Network Analytics Data Store [pdf] User Manual
Secure Network Analytics Data Store, Network Analytics Data Store, Analytics Data Store, Data Store

References

User Manual

CISCO Secure Network Analytics Data Store

Product Information