CISCO Secure Network Analytics Flow Collector NetFlow

Fa'amatalaga

• Igoa o oloa: Flow Collector NetFlow Update Patch for Cisco Secure Network Analytics (formerly Stealthwatch) v7.5.3
• Fa'aliliuga: 7.5.3
• Patch Name: update-fcnf-ROLLUP20251106-7.5.3-v201.swu
• Patch Size: Fa'ateleina file sizes, ensure available disk space

This document provides the patch description and installation procedure for the Cisco Secure Network Analytics Flow Collector NetFlow appliance v7.5.3.

E leai ni mea e manaʻomia muamua mo lenei patch, ae ia mautinoa e te faitauina le vaega Aʻo Leʻi Amata aʻo leʻi amataina.

Igoa Patch ma le Tele

• Igoa: We changed the patch name so that it starts with “update” instead of “patch.” The name for this rollup is update-fcnf-ROLLUP20251106-7.5.3-v2-01. swu.
• Tele: Ua matou faʻateleina le tele o le patch SWU files. O le files atonu e umi se taimi e sii mai ai. E le gata i lea, mulimuli i faʻatonuga i le Siaki le Avanoa Disk Space vaega e faʻamaonia ai e lava lau vaʻa avanoa avanoa ma le fou file tetele.

Fa'amatalaga Patch

This patch, update-fcnf-ROLLUP20251106-7.5.3-v2-01.swu, includes security fixes and fixes for the following issues:

CDETS	Fa'amatalaga
CSCws12322	Converged Analytics (CA) rules from the NDR engine fail to trigger detections due to inconsistent field types
CSCwr48917	Flow Collector Virtual Edition engine crashes with SIGSEGV during SAL telemetry ingest processing
CSCws12324	Failing to process a single parquet file prevents loading the remaining parquet files in the loop
CSCws12325	The Flow Collector engine diagnostic pack contains duplicate log files for the NDR information

O faʻatonuga muamua o loʻo aofia i totonu o lenei patch o loʻo faʻamatalaina i Faʻamaumauga Muamua.

Ae e te le'i Amata

Ia mautinoa e lava lau avanoa avanoa i luga o le Pule mo meafaigaluega uma SWU files e te upload i le Update Manager. Fa'apena fo'i, fa'amaonia e lava lau avanoa avanoa i masini ta'itasi.

Siaki le Avanoa Disk Space
Fa'aaogā fa'atonuga nei e fa'amaonia ai e lava lau avanoa tisiki avanoa:

1. Ulufale i totonu o le fa'aoga o le Appliance Admin.
2. Kiliki ile Fale.
3. Su'e le vaega Fa'aoga Disk.
4. Review le Avanoa (byte) koluma ma faʻamaonia o loʻo ia te oe le avanoa manaʻomia o loʻo avanoa ile /lancope/var/ partition.
   • Manaoga: I luga o masini fa'afoe ta'itasi, e te mana'omia a itiiti ifo ma le fa fa'alua le tele o le fa'afouga faakomepiuta ta'itasi file (SWU) avanoa. I luga o le Pule, e te mana'omia ia le itiiti ifo i le fa taimi le tele o mea uma SWU files e te upload i le Update Manager.
   • Meafaigaluega Pulea: Mo example, afai o le Flow Collector SWU file o le 6 GB, e te manaʻomia le itiiti ifo i le 24 GB o loʻo avanoa ile Flow Collector (/lancope/var) vase (1 SWU file x 6 GB x 4 = 24 GB avanoa).
   • Pule: Mo example, pe a e upload fa SWU files i le Pule e ta'i 6 GB, e te mana'omia le itiiti ifo i le 96 GB o lo'o avanoa i luga o le /lancope/var partition (4 SWU filesx 6 GB x 4 = 96 GB avanoa).

O le laulau o lo'o i lalo o lo'o lisiina ai le patch fou file tele: 

Meafaigaluega	Fa'ailoga File Tele
Pule	6.07 GB
Flow Collector NetFlow	3.02 GB
Fa'aola Aoina sFlow	3.02 GB
Flow Collector Database	2.15 GB
Tafe Sensor	3.13 GB
UDP Faatonu	2.01 GB
Faleoloa Fa'amaumauga	2.10 GB

Download ma Fa'apipi'i

E amata mai i le v7.5.1, o filifiliga nei e lua e maua mo le siiina mai o polokalama faakomepiuta:

• La'uina i lalo o le tusilima: Download software from Cisco Software Central and upload it to your Update Manager.
• La'uina Sa'o o Polokalama Faakomepiuta (Beta): Register with your cisco.com user ID (CCOID) and download software directly to your Update Manager.

Tusi Taiala
Ina ia sii maia lima le faʻafouga o le patch file, fa'auma laasaga nei:

1. Ulufale i Cisco Software Central, https://software.cisco.com.
2. I le vaega o le Download and Upgrade, filifili Avanoa downloads.
3. Fa'aigoa Secure Network Analytics i le Pusa Su'esu'e o Mea.
4. Filifili le faʻataʻitaʻiga meafaigaluega mai le lisi pa'ū i lalo, ona oomi lea o le Enter.
5. I lalo o le Filifili se Ituaiga Polokalama, filifili Secure Network Analytics Patches.
6. Filifili le 7.5.3 mai le vaega Fa'asalalau Fou e su'e ai le patch.
7. La'uina le fa'afouga o le patch file, update-fcnf-ROLLUP20251106-7.5.3-v2-01. swu, and save it to your preferred location.

La'uina Sa'o o Polokalama Faakomepiuta (Beta)
Ina ia fa'aaoga lenei Beta integration ma la'uina mai polokalama faakomepiuta ma fa'afouga o le patch files sa'o i lau Update Manager, fa'amae'a laasaga nei:

E manaʻomia ona e lesitala ma lau Cisco.com ID o le tagata fa'aoga (CCOID) a'o le'i amata ona e fa'aogaina le Direct Software Downloads. Afai ua uma ona e lesitala, e mafai ona e oso i le 3. View ma La'uina Mai Fa'afouga.

1. Tatala le Pule o Fa'afouga
   1. Ulufale i le Pule.
   2. Mai le lisi autū, filifili le Fa'atulagaina > Lalolagi Atoa > Pulega Tutotonu.
   3. Kiliki le Update Manager tab.
2. Resitala mo le La'uina Sa'o o Polokalama Faakomepiuta

Afai ua uma ona e resitala, faase'e i le la'asaga 3. View ma La'uina Mai Fa'afouga.

1. Kiliki le so'otaga o le La'uina Mai Tuusa'o o Polokalama Faakomepiuta e tatala ai le itulau resitala.
2. Kiliki le faamau Resitala e amata ai le faagasologa o le resitalaina.
3. Kiliki le so'otaga o lo'o tu'uina atu.
4. O le a aveina oe i le itulau o le Activate Your Device. Kiliki le Next e faaauau ai.
5. Log in with your cisco.com user ID (CCOID).
6. O le a e mauaina se feʻau "Ua Faʻagaoioia le Masini" pe a maeʻa lau faʻagaoioiga.
7. Toe foʻi i le itulau o le Direct Software Downloads i lau Pule ma kiliki le Continue.
8. Kiliki i so'otaga mo maliega a le EULA ma le K9 e faitau ma talia ai tuutuuga. A uma ona talia tuutuuga, kiliki Fa'aauau.

View ma Fa'afouga o le La'uina Mai

1. Kiliki le faamau Siaki mo Faafouga e siaki ai so'o se faafouga o lo'o avanoa.
2. Kiliki le so'otaga o FA'ASALALAUGA MUAMUA i view ma la'u mai ni patch ma fa'afouga talu ai.
3. Mo le la'uina mai o se fa'afouga po'o se patch kiliki le fa'amau La'uina Uma. A mae'a le la'uina mai, o le a tu'uina atu ia te oe le filifiliga e toe fo'i ai i le Update Manager e fa'aauau ai le fa'agasologa o le fa'afouga. Kiliki le fa'amau Alu i le Update Manager e fa'aauau ai le fa'agasologa o le fa'afouga.

Fa'apipi'i
Ina ia faʻapipiʻi le faʻafouina o le patch file, fa'auma laasaga nei:

1. Ulufale i le Pule.
2. Mai le lisi autū, filifili le Fa'atulagaina > Lalolagi Atoa > Pulega Tutotonu.
3. Kiliki le Update Manager tab.
4. I luga o le Update Manager itulau, kiliki le Upload, ona tatala lea o le faʻafouina patch faʻasao file, update-fcnf-ROLLUP20251106-7.5.3-v2-01.swu.
5. In the Actions column, click the**** (Ellipsis) icon for the appliance, then choose Install Update.

O le patch e toe amata ai le masini.

Fa'atonuga muamua
O mea nei o faʻafitauli faʻaletonu muamua na aofia i totonu o lenei patch:

Fa'asalalau 20251013
CDETS	Fa'amatalaga
CSCwq96150	Faaopoopo debug_baseline Advanced Settings to Baselining functionality to analyze host and group baselines

CSCwr18487	ASA exported Flow Queries show the Flow Action as permitted_denied instead of permitted
CSCwo64455	NDR Engine: Suspicious Process Path Observation is triggered for the wrong source or false findings
CSCwq44395	System occasionally generates fewer Network Visibility Module (NVM ) or Zeek findings
CSCwq75211	The system occasionally fails to back up the Vertica database using the SMB or CIFS fileshare feature on a Non- Data Store Flow Collector.
CSCwq32799	Faaopoopo max_sgt ma bogus_sgts to the Flow Collector Advanced Settings to log information about unknown SGTs found in sw.log
CSCwq19286	The Flow Collector engine may drop unidirectional NetFlow exports containing bi-flow direction
CSCwp20626	Flow Collector shows inappropriate host-based security event algorithms due to reversed flow exports from ASA or FTD firewalls
CSCwm83959	Add SGT information to the logging function in the debug_ flow_stats Fa'atonuga maualuga
CSCwq39497	The Flow Collector engine incorrectly maps its referenced_ host field to the Data Store database schema
CSCwq44398	Flow Collector Virtual Edition engine crashes with SIGSEGV when disk uses Network File Share (NFS) Data Store
CSCwr67942	Flow Collector engine may fail to parse startElement and endElement correctly due to libxml2 update

Fa'afeso'ota'i le Lagolago

Afai e te manaʻomia se fesoasoani faʻapitoa, faʻamolemole fai se tasi o mea nei:

• Fa'afeso'ota'i lau Paaga Cisco i le lotoifale
• Fa'afeso'ota'i Cisco Lagolago
• E tatala se mataupu e web: http://www.cisco.com/c/en/us/support/index.html
• Mo le lagolago telefoni: 1-800-553-2447 (US)
• Mo numera lagolago i le lalolagi atoa: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html

Fa'amatalaga Puletaofia

Cisco ma le Cisco logo o fa'ailoga fa'ailoga po'o fa'ailoga fa'amaufa'ailoga a Cisco ma/po'o ona so'otaga i le US ma isi atunu'u. I view se lisi o faailoga tau Cisco, alu i lenei URL: https://www.cisco.com/go/trademarks. O fa'ailoga tau fefa'ataua'iga lona tolu o lo'o ta'ua o meatotino a latou lava tagata. O le faʻaaogaina o le upu paaga e le faʻaalia ai se mafutaga faʻapaʻaga i le va o Cisco ma soʻo se isi kamupani. (1721R)

© 2025 Cisco Systems, Inc. ma/po'o ana paaga. Ua taofia aia tatau uma.

FAQ

Q: Are there any prerequisites for installing this patch?

A: There are no prerequisites mentioned for this patch, but ensure to read the Before You Begin section before installation.

Q: What does the patch update include?

A: The patch includes security fixes and resolutions for specific issues listed in the manual.

Pepa / Punaoa

CISCO Secure Network Analytics Flow Collector NetFlow [pdf] Taiala mo Tagata Fa'aoga Secure Network Analytics Flow Collector NetFlow, Analytics Flow Collector NetFlow, Flow Collector NetFlow, Collector NetFlow, NetFlow

Fa'asinomaga

• Tusi Taiala