Upgrade Secure Network Analytics (SNA) Best Practices

Introduction

This document describes some best practice information about upgrades to Secure Network Analytics (SNA) (formerly known as Stealthwatch).

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

This document is not restricted to specific software and hardware versions.

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.

Background Information

Version Skips

SNA only supports upgrades from one major version to the next. (For example from 6.9.x to 6.10.x or 7.1.x to 7.2.x.) Version skips are not supported. If the user is comfortable with reset of all data to a factory default state then a hardware appliance can be reimaged, a new VM can be installed, or the "SWU Skipper" can be used to go direct to the target version. 

Software Downloads and Upgrade Guides

• Software and guides for versions 7.1 and higher can be found at Cisco Software Central
• Software and guides for versions previous to 7.1 are no longer available

Hardware Support Matrix

The information in this section is pulled from the Cisco Secure Network Analytics Hardware and Software Version Support Matrix guide. 

Manager

Flow Collector

Data Store

Flow Sensor

Flow Replicator/UDP Director

App Compatibility Matrix

The information in this section is pulled from the Secure Network Analytics Apps Version Compatibility Matrix

ETA Cryptographic Audit

Host Classifier

Network Diagrams and Report Builder

Security Analytics and Logging on Prem and Visibility Assessment

Upgrades by Version

Upgrade Version 7.0.x to 7.1.x

Upgrades to versions: 7.1.1, 7.1.2, 7.1.3

Software Downloads: Software is available from Cisco Software Central

Upgrade Guide: Update guide for 7.0.x to 7.1.3

Upgrade Version 7.1.x to 7.2.1

Upgrades to versions: 7.2.1

Software Downloads: Software is available from Cisco Software Central

Upgrade Guide: currently unavailable

Upgrade Version 7.2.x to 7.3.x

Upgrades to versions: 7.3.0, 7.3.1, 7.3.2

Software Downloads: Software is available from Cisco Software Central

Upgrade Guide: currently unavailable

Upgrade Version 7.3.x to 7.4.x

Upgrades to versions: 7.4.0, 7.4.1 and 7.4.2

Software Downloads: Software is available from Cisco Software Central

Upgrade Guide: Update guide for 7.3.x to 7.4.0 or 7.4.1

Upgrade Guide: Update guide for 7.3.x to 7.4.2

Upgrade Version 7.4.x to 7.5.x

Upgrades to versions: 7.5.0

Software Downloads: Software is available from Cisco Software Central

Upgrade Guide: Update guide for 7.4.x to 7.5.0

Software Support Timelines

Typically a release is covered under Software Maintenance for 12 months post-release and receives Vulnerability and Security Fixes for 18 months post-release. More information about the SNA software Release Model and release support timeline is available from Cisco Stealthwatch® Software Release Model and Release Support Timeline Product Bulletin.

This table lists support timelines from release 7.1.1 onwards.

* indicates the currently recommended version 

End of Life (EOL) Notices

FlexNet EOL

FlexNet licensing went EOL on Dec 31, 2022. All SNA licensing moved to CIsco Smart Licensing. 

Global Threat Analytics (GTA) EOL

GTA is scheduled to go EOL on July 31, 2024. The EOL notice also discusses migration options.