Cisco StealthwatchNetwork Diagrams ReleaseNotes v2.0

Table of ContentsIntroduction 3

Overview 3

Before You Begin 3

App compatibility with Stealthwatch 3

Resource usage 5

Failover 5

Backup 5

Install Network Diagrams 6

Video Tutorials 6

App Compatibility Notice 6

Online Help 7

What's Been Fixed 7

Version 2.0.2 7

Version 2.0.3 8

Version 2.0.4 10

Contact Support 11

© 2020 Cisco Systems, Inc. and/or its affiliates. All rights reserved. - 2 -

IntroductionFor v2.0.x, Network Diagrams has been refactored so that it is compatible withStealthwatch v7.2.x. Underlying architectural changes have been made to theStealthwatch Management Console (SMC) in Stealthwatch v7.2.x.

This document provides general information as well as any associated improvementsand bug fixes for Network Diagrams v2.0.x. The latest version of Network Diagrams isv2.0.4.

OverviewThe network diagram feature allows you to graphically monitor the status of your entiresystem in near real-time. With these network diagrams, administrators can easily viewtheir organization’s network traffic based on any criteria, such as location, function, orvirtual environment.

To view the available video tutorials, see Video Tutorials.

Before You BeginBefore you install Network Diagrams, please read this section.

Network Diagrams is subject to export control laws and regulations. Bydownloading Network Diagrams, you agree that you will not knowingly, withoutprior written authorization from the competent government authorities, exportor re-export (directly or indirectly) Network Diagrams to any prohibiteddestination, end user, or for any end use.

App compatibility with StealthwatchWhen you update Stealthwatch, the app that is currently installed is retained; however,the app may not be compatible with the new Stealthwatch version. Refer to theStealthwatch Apps Version Compatibility Matrix to determine which app version issupported by a particular version of Stealthwatch.

You can have only one version of an app installed on your Stealthwatch ManagementConsole (SMC). Use the App Manager page to manage your installed apps. From thispage you can install, update, uninstall, or view the status of an app. Refer to thefollowing table to learn about the possible app statuses.

Since it is possible that a newer version of an app exists and is not listed in AppManager, always check to see if a newer version is available in Cisco Software Central.

© 2020 Cisco Systems, Inc. and/or its affiliates. All rights reserved. - 3 -

Introduction

When you are updating to a later version of an app, simply install the newerversion over the existing version. You do not need to uninstall your existingapp. If you uninstall Network Diagrams, all files associated with it, includingtemporary files, are removed.

Status Definition Action to Take

UpToDateYour installed app is themost current version.

No action is required.

UpdateAvailable

You have upgraded to anew version ofStealthwatch. Your existingapp is supported by thisversion of Stealthwatch, buta new version of this app isavailable.

If you desire, go to CiscoSoftware Central todownload and install thelatest version (this replacesyour existing version).

UpgradeRequired

You have upgraded to anew version ofStealthwatch, and yourexisting app is notsupported by theStealthwatch version youare now using.

To continue using this app,go to Cisco SoftwareCentral to download andinstall the latest version(this replaces your existingversion).

AppNotSupported

You have upgraded to anew version ofStealthwatch. This app mayno longer be supported bythe version of Stealthwatchyou are now using. It couldbe that this app has beendeprecated or a newerversion of this app has notyet been released.

Go to Cisco SoftwareCentral to see if a newversion has been released.

© 2020 Cisco Systems, Inc. and/or its affiliates. All rights reserved. - 4 -

Introduction

Resource usageNetwork Diagrams supports multiple Flow Collectors and domains. The traffic shown in anetwork diagram represents the data observed in the current domain and all itsassociated Flow Collectors.

Network Diagrams

l supports multiple Flow Collectors and domains

l requires the following amount of disk space:o /lancope - 50 MBo /lancope/var - 280 MB (Keep in mind that this disk space volume is astarting point, and consumption grows up to an additional 2 GB as yoursystem accumulates more data.)

To find the disk usage statistics for an appliance, complete the following steps.

1. In the SMC Web App, click the Global Settings icon, and choose CentralManagement from the drop-down menu.

2. Click the Appliance Manager tab.3. Click the Actions menu for the appliance and choose View Appliance Statistics

from the context menu.4. If prompted, log in to the Appliance Administration interface.

5. Scroll down to the Disk Usage section.

FailoverUpon installation, Network Diagrams is installed on both the primary and secondarySMCs. However, although Network Diagrams is fully functional on the primary SMC, it isavailable only in View mode on the secondary SMC since the data was copied to thesecondary SMC. If the secondary SMC becomes the primary SMC, Network Diagramsfunctions on the new primary SMC.

l If the apps or app versions on your Primary and Secondary StealthwatchManagement Consoles do not match, the apps may not function properly. Whenthere is a mismatch, a message on the App Manager page in Central Manager isdisplayed prompting you to sync your apps or app versions.

BackupRefer to the following table to know if Network Diagrams data and configuration settingscan be backed up.

© 2020 Cisco Systems, Inc. and/or its affiliates. All rights reserved. - 5 -

Introduction

If I perform this type ofbackup... Will the associated data be backed up?

Configurationl All diagrams and all components in theNetwork Diagrams pane (including imagesyou have uploaded) are backed up.

Database l No app-specific data is backed up.

Install Network DiagramsTo install Network Diagrams, access Central Management and click the App Managertab.

l If the available disk space in Stealthwatch is between 100–300 MB, a messageappears informing you how much remaining disk space Stealthwatch has. In thissituation, it is possible that the Network Diagrams app may require more diskspace than is available. See Resource usage in this document to verify howmuch disk space is required for the Network Diagrams app.

l If Stealthwatch has less than 280 MB of disk space, you cannot install this app.

Video TutorialsUse the following video tutorials as needed to help you learn how to use some of thenetwork diagrams functionality.

l Create a basic network diagraml Bend edgesl Create a relationship policy that points back to itself

AppCompatibility NoticeStealthwatch apps were introduced in v7.0.0 of Cisco Stealthwatch.

Stealthwatch apps are similar in concept to the apps you install on a smartphone. Theyare optional independently releasable features that enhance and extend the capabilitiesof Cisco Stealthwatch. You can install, update, and remove Stealthwatch apps usingApp Manager, which you can access in the SMC Web App under the CentralManagement menu option.

© 2020 Cisco Systems, Inc. and/or its affiliates. All rights reserved. - 6 -

Introduction

The release schedule for Stealthwatch apps is independent from the normalStealthwatch upgrade process. Consequently, we can update Stealthwatch apps asneeded without having to link them with a core Stealthwatch release.

To simplify the Stealthwatch customer experience, only one version of a Stealthwatchapp is available to install at any point in time (similar to the app store model). Althoughwe strive for maximum app compatibility, not all versions of an app are compatible withall versions of Stealthwatch. To learn which app version is supported by a particularversion of Stealthwatch, see the Stealthwatch Apps Version Compatibility Matrix.

Some apps may require you to upgrade to the latest version of Cisco Stealthwatch. Inaddition, when you upgrade your Stealthwatch system, you may need to upgrade someor all of the apps.

Cisco reserves the right to discontinue a Stealthwatch app at any time. There may bemany reasons for doing so, including but not limited to the following:

1. The equivalent capabilities provided by the app are now provided elsewhere,either via a new version of the app, a new app, or via a feature in Stealthwatch.

2. The capabilities provided by the app are no longer considered relevant or useful toour customer base.

If the decision is made to discontinue a Stealthwatch app, advance notice is provided atleast sixty days prior to the discontinuation date. Although Stealthwatch apps arecurrently included with your Cisco Stealthwatch license, Cisco reserves the right tocharge license fees for certain Stealthwatch apps in the future.

Online HelpTo access the online help for this app, click the (Help) icon located next to the topicheading in the upper left corner of the page.

What's Been FixedThis section summarizes fixes made in this release. The Stealthwatch story number isprovided for reference.

Version 2.0.2

Defect Description

SWAPP-191When pivoting from a diagram to perform a flow search,if the relationship policy had monitoring filters defined,

© 2020 Cisco Systems, Inc. and/or its affiliates. All rights reserved. - 7 -

Introduction

Defect Description

they were not applied to the flow search.

Now monitoring filters are applied to the flow search.

SWAPP-222

When duplicating a diagram, you could receive a systemerror message.

Now when duplicating a diagram you do not receive asystem error message.

SWAPP-267

When you pressed the Delete key while editing a labelfor an edge, sometimes the label was deleted, and inrarer instances, the related host group was deleted.

Now when you press the Delete key while editing alabel, neither the label nor the related host group isdeleted.

SWAPP-294

When you created a new domain, it did not contain thedefault diagrams.

Now when you created a new domain, it contains thedefault diagrams.

SWAPP-309

If you did not possess permissions to use PolicyManagement, you could edit a diagram.

Now if you do not possess permissions to use PolicyManagement, you cannot access this feature.

Version 2.0.3

Defect Description

SWAPP-175

Although you might not have permission to view somealarms, you could still view them in diagrams.

Now you see only the alarms for which you areauthorized.

SWAPP-195 When you didn't have permission to view Policy

© 2020 Cisco Systems, Inc. and/or its affiliates. All rights reserved. - 8 -

Introduction

Defect Description

Management and tried to access that page, you saw ablank page.

Now you will not see the Policy Management option inthe menu if you do not have permission for thatfunctionality.

SWAPP-203

When using Network Diagrams on narrower screens,you sometimes couldn't read the entire host group nameif the name was long.

Now you can hover over the host group name to see theentire host group name.

SWAPP-268

When you edited a Host Group label or text element inFirefox, you could lose your changes after pressingEnter.

Now your edits are always saved.

SWAPP-269On Firefox, pivoting Policy Management from theNetwork Diagrams could be blocked by the browser.

Now you can pivot to Policy Management in Firefox.

SWAPP-279

When you tried to leave the Network Diagrams app withunsaved changes, sometimes the app displayed theconfirmation dialog twice.

Now the app displays the confirmation dialog once.

SWAPP-303When an application error was displayed, its positionwas incorrect on narrow screens.

Now the error message is positioned correctly.

SWAPP-365

When you wanted to clear a search entry in the HostGroup tree, you had to erase the entry and press Enter.

Now you can also clear the search entry by pressing anX that displays at the end of the Search field.

© 2020 Cisco Systems, Inc. and/or its affiliates. All rights reserved. - 9 -

Introduction

Defect Description

SWAPP-369,SWAPP-308

The Diagram Name and Description fields didn't have acharacter limit, so when you saved a diagram whosename or description was too long, the app would displayan error message.

Now you can enter a name with a maximum of 200characters and description with a maximum of 500characters.

SWAPP 379

In rare cases you could not open some diagrams if oneof the policies referenced a custom application that hadno name.

Now you can successfully open these diagrams.

SWONE-6314,SWONE-5967

You could save a diagram whose Diagram Name fieldcontained only a space, due to you inadvertentlyentering a space in that field.

Now the app trims all spaces that may exist at thebeginning of Diagram Name and Description entries.

Version 2.0.4

Defect Description

LVA-1940

There was a defect that allowed a subset of the app'sREST API endpoints to be called without authentication(for example: images, failover status).

Now authentication is required to access all of the app'sREST API endpoints.

This section summarizes issues that are known to exist in this release. Where possible,workarounds are included. The defect or story number is provided for reference.

© 2020 Cisco Systems, Inc. and/or its affiliates. All rights reserved. - 10 -

Introduction

Contact SupportIf you need technical support, please do one of the following:

Call

l Your local Cisco Partner

l Cisco Stealthwatch Supporto (U.S.) 1-800-553-2447o Worldwide support number:https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html

Open a case

l By web: http://www.cisco.com/c/en/us/support/index.htmll By email: tac@cisco.com

© 2020 Cisco Systems, Inc. and/or its affiliates. All rights reserved. - 11 -

Introduction

Copyright InformationCisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or itsaffiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to thisURL: https://www.cisco.com/go/trademarks. Third-party trademarks mentioned arethe property of their respective owners. The use of the word partner does not imply apartnership relationship between Cisco and any other company. (1721R)

© 2020 Cisco Systems, Inc. and/or its affiliates.

All rights reserved.