CISCO UDP Director Secure Network Analytics Instructions

CISCO UDP Director Secure Network Analytics

Product Information

• The UDP Director Update Patch is designed for Cisco Secure Network Analytics (formerly Stealthwatch) v7.4.1. It provides a fix for the UDP Director Degraded low resources false alarm issue (Defect SWD-19039).
• This patch, patch-udpd-ROLLUP007-7.4.1-v2-02.swu, includes previous defect fixes as well. The previous fixes are listed in the “Previous Fixes” section.

Product Usage Instructions

Before You Begin:
Before installing the patch, ensure that you have enough available space on the Manager and each individual appliance.

To check available disk space:

1. For Managed Appliances, ensure that you have enough space on the respective partitions. For example, if the Flow Collector SWU file is 6 GB, you need at least 24 GB available on the Flow Collector (/lancope/var) partition (1 SWU file x 6 GB x 4 = 24 GB available).
2. For the Manager, ensure that you have enough space on the/lancope/var partition. For example, if you upload four SWU files to the Manager that are each 6 GB, you need at least 96 GB available (4 SWU files x 6 GB x 4 = 96 GB available).

Download and Installation:
To install the patch update file, follow these steps:

1. Log in to the Manager.
2. Click the (Global Settings) icon, then choose Central Management.
3. Click Update Manager.
4. On the Update Manager page, click Upload, and then select the saved patch update file, patch-udpd-ROLLUP007-7.4.1-v2-02.swu.
5. Choose the Actions menu for the appliance, then select Install Update.
6. The patch will restart the appliance.

Previous Fixes:
The patch includes the following previous defect fixes:

that prevented users from accessing the Appliance Setup Tool
(AST).
SWD-17759| Fixed an issue that was preventing patches from
reinstalling.
SWD-17832| Fixed an issue where the system stats folder was missing from
v7.4.1 diag packs.
SWD-17888| Fixed an issue which allows any valid MTU range that the
operating system kernel permits.
SWD-17973| Reviewed an issue where the appliance was unable to install
patches due to a lack of disk space.
SWD-18140| Fixed UDP Director Degraded false alarm issues by validating
the frequency of packet drop counts in a 5-minute interval.
SWD-18357| Fixed an issue where the SMTP settings were re-initialized to
default settings after installing an update.
SWD-18522| Fixed an issue where the managementChannel.json file was
missing from the Central Management backup configuration.

UDP Director Update Patch for Cisco Secure Network Analytics (formerly Stealthwatch) v7.4.1
This document provides the patch description and installation procedure for the Cisco Secure Network Analytics UDP Director appliance v7.4.1. Make sure to review the Before You Begin section before you get started.

• There are no prerequisites for this patch.

Patch Description

This patch, patch-udpd-ROLLUP007-7.4.1-v2-02.swu, includes the following fix:

• Previous fixes included in this patch are described in Previous Fixes.

Before You Begin

Make sure you have enough available space on the Manager for all appliance SWU files that you upload to Update Manager. Also, confirm you have enough available space on each individual appliance.

Check the Available Disk Space

Use these instructions to confirm you have enough available disk space:

1. Log in to the Appliance Admin interface.
2. Click Home.
3. Locate the Disk Usage section.
4. Review the Available (byte) column and confirm that you have the required disk space available on the /lancope/var/ partition.
   • Requirement: On each managed appliance, you need at least four times the size of the individual software update file (SWU) available. On the Manager, you need at least four times the size of all appliance SWU files that you upload to Update Manager.
   • Managed Appliances: For example, if the Flow Collector SWU file i s 6 GB, you need at least 24 GB available on the Flow Collector (/lancope/var) partition (1 SWU file x 6 GB x 4 = 24 GB available).
   • Manager: For example, if you upload four SWU files to the Manager that are each 6 GB, you need at least 96 GB available on the /lancope/var partition (4 SWU files x 6 GB x 4 = 96 GB available).

Download and Installation

Download
To download the patch update file, complete the following steps:

1. Log in to Cisco Software Central, https://software.cisco.com.
2. In the Download and Upgrade area, choose Access Downloads.
3. Type Secure Network Analytics in the Select a Product search box.
4. Choose the appliance model from the drop-down list, then press Enter.
5. Under Select a Software Type, choose Secure Network Analytics Patches.
6. Choose 7.4.1 from the Latest Releases area to locate the patch.
7. Download the patch update file, patch-udpd-ROLLUP007-7.4.1-v2-02.swu, and save it to your preferred location.

Installation
To install the patch update file, complete the following steps:

1. Log in to the Manager.
2. Click the (Global Settings) icon, then choose Central Management.
3. Click Update Manager.
4. On the Update Manager page, click Upload, and then open the saved patch update file, patch-udpd-ROLLUP007-7.4.1-v2-02.swu.
5. Choose the Actions menu for the appliance, then choose Install Update.
   • The patch restarts the appliance.

Previous Fixes

The following items are previous defect fixes included in this patch:

Fixed an issue related to the UDP Director memory alarm.
SWD-17734| Fixed an issue where there were duplicate Avro files.

SWD-17745

| Fixed an issue related to having UEFI mode enabled in VMware that prevented users from accessing the Appliance Setup Tool (AST).
SWD-17759| Fixed an issue that was preventing patches from reinstalling.
SWD-17832| Fixed an issue where the system-stats folder was missing from v7.4.1 diag packs.
SWD-17888| Fixed an issue that allows any valid MTU range that the operating system kernel permits.
SWD-17973| Reviewed an issue where the appliance was unable to install patches due to a lack of disk space.
SWD-18140| Fixed “UDP Director Degraded” false alarm issues by validating the frequency of packet drop counts in a 5-minute interval.
SWD-18357| Fixed an issue where the SMTP settings were re-initialized to default settings after installing an update.
SWD-18522| Fixed an issue where the managementChannel.json file was missing from the Central Management backup configuration.
SWD-18553| Fixed an issue where the virtual interface order was incorrect after the appliance rebooted.
SWD-18817| The data retention setting of flow search jobs was increased to 48 hours.
SWONE-22943/ SWONE-23817| Fixed an issue where the reported serial number was changed to use the full hardware serial number.
SWONE-23314| Fixed an issue in the Data Store help topic.
---|---
SWONE-24754| Fixed an issue in the Investigating Alarming Hosts help topic.

Contacting Support

If you need technical support, please do one of the following:

• Contact your local Cisco Partner
• Contact Cisco Support
• To open a case by web: http://www.cisco.com/c/en/us/support/index.html.
• To open a case email: tac@cisco.com.
• For phone support: 1-800-553-2447 (U.S.)
• For worldwide support numbers:
  https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html.

Copyright Information

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: https://www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1721R).

© 2023 Cisco Systems, Inc. and/or its affiliates.

All rights reserved.

References

• Support - Cisco Support and Downloads – Documentation, Tools, Cases - Cisco
• Submit Form
• Cisco Software Central
• Cisco Software Central
• Cisco Worldwide Support Contacts - Cisco
• Cisco Trademarks - Cisco

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>