Tus Thawj Saib Xyuas Hloov Kho Patch rau Cisco Secure Network Analytics (yav tas los Stealthwatch) v7.4.2

Cov ntaub ntawv no muab cov lus piav qhia thaj thiab cov txheej txheem kev teeb tsa rau Cisco Secure Network Analytics Manager (yav tas los Stealthwatch Management Console) khoom siv v7.4.2.
Tsis muaj qhov yuav tsum tau ua ua ntej rau thaj ua rau thaj no, tab sis nco ntsoov koj nyeem Ua ntej Koj Pib ntu ua ntej koj pib.

Patch Name thiab Size

• Lub Npe: Peb hloov lub npe thaj kom nws pib nrog "hloov tshiab" es tsis yog "patch." Lub npe rau qhov rollup no yog hloov tshiab-smc-ROLLUP20230928-7.4.2-v201.swu.
• Loj: Peb nce qhov loj ntawm thaj SWU files. Cov files yuav siv sijhawm ntev dua los rub tawm. Tsis tas li ntawd, ua raws li cov lus qhia hauv Kos qhov Av Disk Space seem kom paub meej tias koj muaj qhov chaw disk txaus nrog qhov tshiab file qhov ntau thiab tsawg.

Patch Description

Qhov no thaj, hloov tshiab-smc-ROLLUP20230928-7.4.2-v2-01.swu, suav nrog cov kev kho hauv qab no:

CDETS	Kev piav qhia
TIAB SA 56763	Txhim kho qhov teeb meem uas Cov Ntaub Ntawv Tsis tuaj yeem tsim tsis tau thaum Flow Sensor 4240 tau teeb tsa siv Tib Cache Hom.
wb 74520	Kho qhov teeb meem uas New Flows Initiated tswb cov ntsiab lus yog 1000 lub sij hawm loj dua lawv yuav tsum.
wb 51558	Kho qhov teeb meem uas qhov Flow Search custom time range filter tsis pom cov txiaj ntsig thaum cov lus tau teeb tsa rau Suav.
wb 14756	Kho qhov teeb meem hauv Desktop Client qhov twg cov lus sib cuam tshuam tsis tau pom cov txiaj ntsig ntws.
wb 89883	Cov txheej txheem rov tsim dua tshiab rau daim ntawv pov thawj tus kheej uas tsis tas siv nws tus kheej kos npe tau yooj yim. Rau cov lus qhia, xa mus rau SSL/TLS Certificate Guide for Managed Appliances.

Cov kev kho yav dhau los suav nrog hauv thaj ua rau thaj no tau piav qhia hauv Previous Fixes.

Ua ntej Koj Pib

Xyuas kom tseeb tias koj muaj chaw txaus rau ntawm Tus Thawj Tswj rau txhua yam khoom siv SWU files uas koj upload rau Update Manager. Tsis tas li, paub meej tias koj muaj chaw txaus rau txhua tus neeg siv khoom.

Xyuas qhov Av Disk Space
Siv cov lus qhia no kom paub meej tias koj muaj qhov chaw disk txaus:

1. Nkag mus rau Appliance Admin interface.
2.  Nyem Tsev.
3. Nrhiav qhov Disk Usage section.
4.  Review cov Available (byte) kem thiab paub meej tias koj muaj qhov xav tau disk qhov chaw muaj nyob rau ntawm /lancope/var/ muab faib.
   • Yuav Tsum Tau: Ntawm txhua lub cuab yeej tswj hwm, koj xav tau tsawg kawg plaub npaug ntawm qhov loj ntawm tus kheej hloov kho software file (SWU) muaj. Ntawm Tus Thawj Tswj, koj xav tau tsawg kawg yog plaub npaug ntawm qhov loj ntawm tag nrho cov khoom siv SWU files uas koj upload rau Update Manager.
   • Cov Khoom Siv Tswj Xyuas: Piv txwv liample, yog Flow Collector SWU file yog 6 GB, koj xav tau tsawg kawg yog 24 GB muaj nyob rau ntawm Flow Collector (/lancope/var) muab faib (1 SWU file x 6 GB x 4 = 24 GB muaj).
   • Tus Thawj Coj: Piv txwv liample, yog koj upload plaub SWU files rau Tus Thawj Tswj uas yog txhua 6 GB, koj xav tau tsawg kawg yog 96 GB muaj nyob rau ntawm /lancope/var muab faib (4 SWU filesx 6 GB x 4 = 96 GB muaj).

Cov lus hauv qab no teev cov thaj tshiab file qhov ntau thiab tsawg:

Khoom siv	File Loj
Tus thawj tswj	5.7 GB ua
Flow Collector NetFlow	2.6 GB ua
Flow Collector sFlow	2.4 GB ua
Flow Collector Database	1.9 GB ua
Flow Sensor	2.7 GB ua
UDP Director	1.7 GB ua
Cov Ntaub Ntawv Khw	1.8 GB ua

Download thiab Installation

Download tau
Txhawm rau rub tawm thaj hloov tshiab file, ua kom tiav cov kauj ruam hauv qab no:

1. Nkag mus rau Cisco Software Central, https://software.cisco.com.
2.  Hauv thaj chaw Download thiab Upgrade, xaiv Access downloads.
3.  Ntaus Secure Network Analytics nyob rau hauv Xaiv ib lub thawv tshawb nrhiav khoom.
4. Xaiv tus qauv khoom siv los ntawm daim ntawv teev npe, ces nias Enter.
5.  Hauv Xaiv Ib Hom Software, xaiv Secure Network Analytics Patches.
6.  Xaiv 7.4.2 los ntawm Qhov Chaw Tshaj Tawm Kawg los nrhiav thaj chaw.
7. Download tau lub thaj hloov tshiab file, hloov tshiab-smc-ROLLUP20230928-7.4.2-v201.swu, thiab txuag nws rau qhov chaw koj nyiam.

Kev teeb tsa

Txhawm rau nruab thaj hloov tshiab file, ua kom tiav cov kauj ruam hauv qab no:

1. Nkag mus rau Tus Thawj Tswj.
2. Los ntawm cov ntawv qhia zaub mov tseem ceeb, xaiv Configure> GLOBAL Central Management.
3. Nyem qhov Update Manager tab.
4. Ntawm nplooj ntawv hloov tshiab Tus Thawj Tswj, nyem Upload, thiab tom qab ntawd qhib qhov hloov tshiab thaj hloov tshiab file, hloov-smc-ROLLUP20230928-7.4.2-v2-01.swu.
5. Hauv kab ua haujlwm, nyem qhov (Ellipsis) icon rau cov khoom siv, tom qab ntawd xaiv Nruab Hloov Kho Tshiab.

Lub thaj reboots lub cuab yeej.

Kev hloov pauv daim ntawv tso cai ntse

Peb tau hloov cov kev cai thauj mus los rau Smart Licensing.
Yog tias koj tab tom kho cov cuab yeej siv los ntawm 7.4.1 lossis siab dua, nco ntsoov tias cov khoom siv tuaj yeem txuas rau smartreceiver.cisco.com.

Paub qhov teeb meem: Custom Security Events

Thaum koj rho tawm ib qho kev pabcuam, daim ntawv thov, lossis pawg tswv tsev, nws tsis raug tshem tawm ntawm koj cov xwm txheej kev nyab xeeb, uas tuaj yeem ua rau koj qhov kev cai ruaj ntseg teeb tsa thiab ua rau lub tswb ploj lossis lub tswb tsis raug. Ib yam li ntawd, yog tias koj lov tes taw Kev Nyab Xeeb Kev Nyab Xeeb, qhov no tshem tawm cov koom haum pab pawg Xov Xwm ntxiv, thiab koj yuav tsum hloov kho koj cov xwm txheej kev ruaj ntseg.
Peb pom zoo cov hauv qab no:

• Reviewing: Siv cov lus qhia hauv qab no los rovview tag nrho cov xwm txheej kev cai ruaj ntseg thiab paub meej tias lawv yog qhov tseeb.
• Kev Npaj: Ua ntej koj rho tawm ib qho kev pabcuam, daim ntawv thov, lossis pawg tswv tsev, lossis lov tes taw
  Threat Feed, review koj cov xwm txheej kev ruaj ntseg kev cai los txiav txim seb koj puas xav hloov lawv.
  1. Nkag mus rau koj tus Thawj Tswj.
  2. Xaiv Configure > DETECTION Policy Management.
  3. Rau txhua qhov xwm txheej kev ruaj ntseg, nyem qhov (Ellipsis) icon, thiab xaiv Kho kom raug.
• Reviewing: Yog hais tias qhov xwm txheej kev ruaj ntseg tsis muaj dab tsi los yog tsis muaj txoj cai qhov tseem ceeb, tshem tawm qhov xwm txheej los yog hloov nws kom siv txoj cai tseem ceeb.
• Kev Npaj: Yog tias txoj cai muaj nuj nqis (xws li kev pabcuam lossis pab pawg tswv tsev) koj tab tom npaj yuav rho tawm lossis ua haujlwm tsis raug suav nrog hauv qhov xwm txheej kev nyab xeeb, rho tawm qhov xwm txheej lossis hloov kho kom siv txoj cai muaj nqis.

Rau cov lus qhia ntxaws, nyem qhov (pab) icon.

Yav dhau los Kho

Cov khoom hauv qab no yog cov kev kho tsis raug yav dhau los suav nrog hauv thaj chaw no:

Cov duab 20230823
CDETS	Kev piav qhia
CWJ 86030	Txhim kho qhov teeb meem uas tau txais kev ceeb toom ceeb toom tshwm sim tom qab
	Disabling qhov Kev Nyab Xeeb Pub (yav tas los Stealthwatch Threat Intelligence Feed).
wb 79482	Kho qhov teeb meem uas CLI lo lus zais tsis tau rov qab los thaum Central Management thiab cov cuab yeej thaub qab files tau rov qab los.
wb 67529	Kho qhov teeb meem qhov twg lub sij hawm ntau poob thiab cov ntaub ntawv yog tsis pom thaum xaiv Flow Search Results los ntawm ib sab saum toj Tshawb nrhiav (nrog rau lub sijhawm kev cai xaiv).
CWJ 18608	Txhim kho qhov teeb meem qhov twg Cov Ntaub Ntawv Khw Flow Search query ignored process_name thiab process_hash filtering tej yam kev mob.
CWJ 14466	Kho qhov teeb meem qhov twg Database Updates poob tswb tsis raug tshem tawm ntawm Tus Thawj Tswj.
CWJ 17234	Kho qhov teeb meem qhov twg, tom qab tus Manager restarted, nws ua tsis tau tejyam download Threat Feed hloov tshiab.
CWJ 23121	Disabled unsupported ISE Session Started Observation.
CWJ 35228	Ntxiv SubjectKeyIdentifier thiab AuthorityKeyIdentifier extensions thiab clientAuth thiab serverAuth EKUs kom ruaj ntseg Network Analytics tus kheej kos npe daim ntawv pov thawj.

Cov duab 20230727
CDETS	Kev piav qhia
wb 71770	Txhim kho qhov teeb meem qhov twg lub database disk chaw ceeb toom tsis ua haujlwm raug ntawm Flow Collector.
wb 80644	Kho qhov teeb meem uas Tus Thawj Tswj tsis tuaj yeem daws tau ntau dua tshaj 40 daim ntawv pov thawj hauv Trust Store.
wb 98685	Kho qhov teeb meem hauv Desktop Client uas tsim ib qho tshiab host pawg nrog IP ntau yam ua tsis tau.
CWJ 08506	Kho qhov teeb meem qhov twg /lancope/info/patch tsis muaj qhov tseeb nruab thaj ntaub ntawv rau lub v7.4.2 ROLLUP thaj ua rau thaj.

Cov duab 20230626
CDETS	Kev piav qhia
wb 73341	Txhim kho kev tswj xyuas kom khaws cov ntaub ntawv tshiab thiab tshem tawm cov ntaub ntawv qub qub thaum qhov chaw khaws ntaub ntawv tsawg.
wb 74281	Kho qhov teeb meem uas cov lus nug los ntawm cov ntsiab lus zais tau ua rau muaj teeb meem kev ua haujlwm hauv UI.
CWJ 14709	Hloov kho Azul JRE hauv Desktop Client.

Cov duab 003
CDETS	Kev piav qhia
SWD-18734 CSCwd 97538	Txhim kho qhov teeb meem uas cov npe Host Group Management tsis tau tshwm sim tom qab rov qab kho qhov loj host_groups.xml file.
SWB-19095 CSCwf30957	Kho qhov teeb meem uas cov ntaub ntawv raws tu qauv ploj lawm los ntawm exported CSV file, whereas lub chaw nres nkoj kem tso tawm nyob rau hauv UI qhia ob qhov chaw nres nkoj thiab raws tu qauv cov ntaub ntawv.

Cov duab 002
CDETS	Kev piav qhia
CWJ 54038	Kho qhov teeb meem qhov twg Lim - Interface Service Traffic dialog box tsis tau pom rau kev pom thaum nias lub Lim khawm ntawm Interface Service Traffic window hauv Desktop Client.

Cov duab 002
CDETS	Kev piav qhia
CWJ 57241	Kho qhov teeb meem LDAP timeout.
TIAB SA 25788	Txhim kho qhov teeb meem nyob qhov twg cov khawm Siv Chaw hauv Central Management muaj rau kev hloov pauv hauv Internet Proxy configuration.
TIAB SA 56763	Kho qhov teeb meem uas 5020 yuam kev tau qhia nyob rau nplooj ntawv Cov Ntaub Ntawv thaum Flow Sensor 4240 tau teeb tsa los siv ib hom Cache.
TIAB SA 67826	Kho qhov teeb meem uas Flow Search filtering los ntawm Subject TrustSec tsis ua haujlwm.
CWJ 14358	Txhim kho qhov teeb meem uas xa tawm CSV ceeb toom ceeb toom muaj cov kab tshiab hauv kab lus Qhia.
TIAB SA 91745	Txhim kho qhov teeb meem uas Tus Thawj Saib Xyuas Kev Sib Txuas Lus Tshaj Tawm tsis tau qhia qee cov ntaub ntawv thaum daim ntawv tshaj tawm tau tsim rau lub sijhawm ntev.
wb 02240	Kho qhov teeb meem tiv thaiv Analytics pab thiab lov tes taw thaum cov ntaub ntawv khaws cov password muaj qhov chaw dawb.
wb 08393	Txhim kho qhov teeb meem uas cov ntaub ntawv khaws cia cov lus nug ua tsis tiav, vim tias "JOIN Inner tsis haum rau hauv lub cim xeeb" yuam kev.

Cov duab 001
CDETS	Kev piav qhia
TIAB SA 25802	Kho qhov teeb meem uas tus Thawj Tswj tsis tau rho tawm v7.4.2 SWU file.
TIAB SA 30944	Txhim kho qhov teeb meem uas qhov Kev Nyab Xeeb Cov Txheej Txheem hopopt tau ua tsis raug raws li kev qhia ntws.
TIAB SA 49107	Txhim kho qhov teeb meem uas lub tswb tsis raug cai, SMC_ DBMAINT_DSTORE_COMMUNICATION_DOWN raug tsa los ntawm Tus Thawj Tswj.

Cov duab 001
CDETS	Kev piav qhia
CWJ 14697	Txhim kho qhov teeb meem uas nplooj ntawv Flow Search Results tsis qhia lub sijhawm hloov tshiab kawg rau cov lus nug uas tab tom ua.
CWJ 16578	Tshem tawm % Ua tiav kab los ntawm Cov Haujlwm Ua Haujlwm tiav ntawm nplooj ntawv Tswj Haujlwm.
CWJ 16584	Txhim kho qhov teeb meem uas Cov Lus Nug Hauv Kev Ua Haujlwm tau qhia luv luv ntawm nplooj ntawv Flow Search Results rau cov lus nug tiav thiab tshem tawm.
CWJ 16588	Simplified cov ntawv xov xwm banner ntawm nplooj ntawv Flow Search, Flow Search Results nplooj ntawv, thiab nplooj ntawv Tswj Haujlwm.
CWJ 17425	Kho qhov teeb meem qhov twg Host Group Management IPs tsis tau txheeb alpha-tus lej.
CWJ 17430	Kho qhov teeb meem qhov twg Host Group Management IPs duplication tsis raug tshem tawm.

Hu rau Support

Yog tias koj xav tau kev pab txhawb nqa, thov ua ib qho hauv qab no:

•  Hu rau koj tus khub Cisco hauv zos
•  Hu rau Cisco Support
• Qhib ib rooj plaub los ntawm web: http://www.cisco.com/c/en/us/support/index.html
• Txhawm rau qhib rooj plaub los ntawm email: tac@cisco.com ib
• Kev them nyiaj yug xov tooj: 1-800-553-2447 Ib (US)
•  Rau cov lej txhawb thoob ntiaj teb:
  https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwidecontacts.html

Copyright Information
Cisco thiab Cisco logo yog cov cim lag luam lossis cov cim lag luam ntawm Cisco thiab / lossis nws cov koom tes hauv Asmeskas thiab lwm lub tebchaws. Rau view ib daim ntawv teev npe ntawm Cisco trademarks, mus rau qhov no URL: https://www.cisco.com/go/trademarks. Cov khoom lag luam thib peb tau hais tseg yog cov cuab yeej ntawm lawv cov tswv. Kev siv lo lus tus khub tsis hais txog kev sib koom tes ntawm Cisco thiab lwm lub tuam txhab. (1721R)

© 2023 Cisco Systems, Inc. thiab/los yog nws cov koom tes.
Txhua txoj cai.

Cov ntaub ntawv / Cov ntaub ntawv

CISCO Secure Network Analytics Manager [ua pdf] Cov neeg siv phau ntawv qhia Secure Network Analytics Manager, Network Analytics Manager, Analytics Manager, Tus Thawj Saib Xyuas

Cov ntaub ntawv

• Cov neeg siv phau ntawv