Upgrade Secure Network Analytics (SNA) Best Practices

Introduction

This document describes some best practice information about upgrades to Secure Network Analytics (SNA) (formerly known as Stealthwatch).

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

This document is not restricted to specific software and hardware versions.

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.

Background Information

SNA only supports upgrades from one major release to the next. (For example from 7.3.x to 7.4.x or 7.4.x to 7.5.x) Release skips are not supported. If the user is comfortable with reset of all data to a factory default state then a hardware appliance can be reimaged, a new VM can be installed.

Software Downloads and Upgrade Guides

• Software and guides for releases 7.3.2 and higher can be found at Cisco Software Central
• Software and guides for releases previous to 7.3.2 are no longer available

Hardware Support Matrix

The information in this section is pulled from the Cisco Secure Network Analytics Hardware and Software Version Support Matrix guide as of release 7.5.3.

Manager & Flow Collector

Data Store

Flow Sensor

Flow Replicator/UDP Director

App Compatibility Matrix

The information in this section is pulled from the Secure Network Analytics Apps Version Compatibility Matrix

ETA Cryptographic Audit

Host Classifier

Network Diagrams and Report Builder (Report Builder is integrated into the product starting 7.4.0)

Security Analytics and Logging on Prem (integrated in product starting 7.5.1) and Visibility Assessment

Upgrades by Release

Upgrade Release 7.3.x to 7.4.x

Upgrades to releases: 7.4.0, 7.4.1 and 7.4.2

Software Downloads: Software is available from Cisco Software Central

Upgrade Guide: Update guide for 7.3.x to 7.4.0 or 7.4.1

Upgrade Guide: Update guide for 7.3.x to 7.4.2

Upgrade Release 7.4.x to 7.5.x

Upgrades to releases: 7.5.0, 7.5.1, 7.5.2, 7.5.3

Software Downloads: Software is available from Cisco Software Central

Upgrade Guide: Update guide for 7.4.x to 7.5.0

Upgrade Guide: Update guide for 7.4.x and 7.5.0 to 7.5.1
Upgrade Guide: Update guide for 7.4.x and 7.5.x to 7.5.2
Upgrade Guide: Update Guide for 7.4.x and 7.5.x to 7.5.3

Software Support Timelines

Typically a release is covered under Software Maintenance for 12 months post-release and receives Vulnerability and Security Fixes for 18 months post-release. More information about the SNA software Release Model and release support timeline is available from Cisco Stealthwatch® Software Release Model and Release Support Timeline Product Bulletin.

This table lists support timelines from release 7.1.1 onwards.

* indicates the currently recommended release

End of Life (EOL) Notices

FlexNet EOL

FlexNet licensing went EOL on Dec 31, 2022. All SNA licensing moved to CIsco Smart Licensing. 

Global Threat Analytics (GTA) EOL

GTA is scheduled to go EOL on July 31, 2024. The EOL notice also discusses migration options. 

Upgrade Gotchas and Warnings

Number 1: SMC Failover: Once you start an upgrade, do NOT perform an SMC failover until ALL appliances are upgraded, this could result in the system becoming inoperable.