downloading and licensing stealthwatch products v7.1 - cisco

53
Cisco Stealthwatch Downloading and Licensing Guide 7.1

Upload: khangminh22

Post on 29-Apr-2023

1 views

Category:

Documents


0 download

TRANSCRIPT

Cisco StealthwatchDownloading and Licensing Guide 7.1

Table of ContentsIntroduction 4

Purpose 4

Audience 4

Preparation 4

Enterprise Agreement Customers 4

Trial Licenses 5

Download and License Center 5

Contacting Support 6

Registering and Licensing Process Overview 7

Registering Your Account 8

Registering Your Account 8

Defining Your Password 10

Adding License Tokens to Your Account 11

Adding License Tokens to Your Account 11

Downloading Stealthwatch Software 13

Installing a New Virtual Appliance 13

Installing a New KVM Virtual Appliance 15

Updating Software 17

Registering Your Stealthwatch Appliances 19

Copy the Appliance Serial Number 19

Copy the Serial Number from Central Management 19

Copy the Serial Number from the Appliance Admin Interface 20

Register the Appliance 22

Add Licenses and Features to the Account 23

Activating Licenses on Your Appliances 26

Process Overview 26

Activating Licenses Online 26

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 2 -

Preparing the Appliance for Online License Activation 27

Activating Licenses Online with the Web Client (Recommended) 28

Activating Licenses Online with the Web Client for Standalone Appliances 31

Activating Licenses Online with the Desktop Client 32

Activating Licenses Offline 34

Preparing the Appliance for Offline License Activation 34

Activating Licenses Offline with the Web Client 34

Activating Licenses Offline with the Desktop Client 37

Reviewing License Status 39

Opening License Management from Central Management 39

Opening License Management from the Appliance Admin Interface 41

Opening License Management from the Desktop Client 42

Configuring License Expiration Notifications 43

Add a User Email Address to your Account 43

Create a License Rule 45

Create the Email Notification 47

Test the Email Notification 50

Updating or Purchasing Licenses 52

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 3 -

IntroductionPurposeThis guide provides the procedures for registering and licensing your CiscoStealthwatch™ Enterprise products. Whether a virtual appliance or a UCS hardwareappliance, all Stealthwatch products must be registered and licensed.

AudienceThe intended audience for this document includes personnel responsible for registeringand licensing Stealthwatch products.

PreparationYou will need the following information to register and license your appliances: 

l License Token:When you purchase a product, you will be given a LicenseToken or a Product Activation Key (PAK). This information is provided in theproduct purchase confirmation (via email) or the hardware box (UDP Director only).Refer to Adding License Tokens to Your Account for details. If you cannot findthis information, contact Cisco Stealthwatch Support.

Enterprise Agreement customers do not need License Tokens or PAKs toregister. For details, please refer to Enterprise Agreement Customers.

l Serial Number: The serial number can be found in Central Management or on theAppliance Administration Home page, which is available after you install and con-figure the appliance. Refer to Registering Your Stealthwatch Appliances fordetails.

Enterprise Agreement CustomersIf you are an Enterprise Agreement customer, license fulfillment is done by submitting aprovisioning request through the Enterprise Agreement Work Space (EAWS) in yourSmart Account. Enterprise Agreement customers do not need License Tokens or PAKsto register.

If you are a new customer, an account will be created for you in the Download andLicense Center once the provisioning request has been received.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 4 -

Introduction

Trial LicensesAll Stealthwatch appliances include a 90-day trial license, which begins the moment theappliance is powered on for the first time.

l Expiration: After 90 days, the trial license expires, and you will not be able to usethe appliance until you have activated a new license. Stealthwatch stops pro-cessing new data, and historical data is unavailable.

l Licenses: To obtain a new license or update an existing license, contact yourlocal Cisco Partner.

Make sure you activate new licenses for appliances before the 90-day trialperiod expires. Otherwise, the appliance will stop functioning, and you will beunable to use it.

Download and License CenterThe Download and License Center, https://stealthwatch.flexnetoperations.com, is anonline software delivery service that helps you manage your account and stay currentwith your Stealthwatch products.

Use the Download and License Center for the following: 

l Registering New Appliances

l Downloading New Virtual Appliance Software Files

l Downloading Software Update Files

l Adding Appliance Licenses and Features

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 5 -

Introduction

Contacting SupportIf you need technical support, make sure you have your appliance serial numbers, andcontact Cisco Stealthwatch Support in any of the following ways:

l Contact your local Cisco Partner

l Contact Cisco Stealthwatch Supporto To open a case by web: http://www.-cisco.com/c/en/us/support/index.html

o To open a case by email: [email protected] For phone support: 1-800-553-2447 (U.S.)o For worldwide support numbers: https://www.-cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 6 -

Introduction

Registering and Licensing ProcessOverviewUse this guide to register new appliances and license them. The overall process is asfollows: 

1. Access the Download and License Center: Log in to your account. For initialaccount registration, you will use one of your Product Activation Keys (PAK) orLicense Tokens (Token IDs).

2. Add License Tokens: Use your Product Activation Keys (PAK) or LicenseTokens (Token IDs) to add each appliance to your Download and License Centeraccount.

3. Download Software: Use Downloading Stealthwatch Software to install a newvirtual appliance or update appliance software.

4. Register Appliances: Register all appliance serial numbers to your Download andLicense Center account.

5. License Appliances and Add Features: Add the licenses and features to yourDownload and License Center account.

6. Activate Licenses on the Appliances: To use an appliance, activate the licenseon the appliance through the SMC or on the appliance individually.

7. Review License Status: Use the License Management page to review the statusof your product licenses.

8. Configure License Expiration Alarms: Set up email alerts for license expiration,license corruption, or unlicensed products.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 7 -

Registering and Licensing Process Overview

Registering Your AccountUse the following instructions to set up your account in the Download and LicenseCenter.

l Download and License Center: https:/stealthwatch.flexnetoperations.coml License Tokens:When you purchase a product, you will be given a LicenseToken or a Product Activation Key (PAK). This information is provided in theproduct purchase confirmation (via email) or the hardware box (UDP Director only).If you cannot find this information, contact Cisco Stealthwatch Support.

l Enterprise Agreement Customers: If you purchased a virtual appliance throughan Enterprise Agreement, you do not need a License Token or PAK to register yourDownload and License account. Go to Defining Your Password.

Registering Your AccountA License Token or Product Activation Key is required to initiate the account setup. Ifyou are an Enterprise Agreement customer, skip this section and go to DefiningYour Password.

1. Go to https://stealthwatch.flexnetoperations.com.

2. Click the Register License Token link.

3. Enter one License Token or Product Activation Key in the License Token field.Click Submit License Token.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 8 -

Registering Your Account

If you received more than one PAK or License Token, you can use any of thesetoken IDs for registration. You will add the remaining tokens to your account ina later procedure.

4. Enter your contact information.

5. Click Submit My Registration Information. The Product Information page opensshowing the product associated with the token you registered.

6. Click Logout. Leave the page open and go to Defining your Password.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 9 -

Registering Your Account

Defining Your PasswordUse the following instructions to define your Download and License Center accountpassword or to reset your password.

1. Go to https://stealthwatch.flexnetoperations.com.

2. Click Password Finder.

The Password Finder dialog box displays.

3. Enter your email address. Click Submit.4. Within 5 minutes, you will receive an email with a link to reset your password.

5. Click the link and follow the on-screen prompts to reset your password.

The email link is valid for only 10 minutes after it is sent to you. If the email linkexpires, click Password Finder again to request a new link.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 10 -

Registering Your Account

Adding License Tokens to Your AccountThe token is required to register the product and license it in the Download and LicenseCenter.

When you purchase an appliance, you will be given a License Token or a ProductActivation Key (PAK) for each Stealthwatch product you purchase. This information isprovided in the product purchase confirmation (via email) or the hardware box (UDPDirector only). If you cannot find this information, contact Cisco Stealthwatch Support.

l Review License Tokens: To review the tokens applied to your Download andLicense Center account, click View License Tokens. If you have not received atoken, contact Cisco Stealthwatch Support.

l Enterprise Agreement Customers: If you purchased a virtual appliance throughan Enterprise Agreement, you do not need a License Token or PAK. To confirm theproducts are listed on your Download and License Center account, click Order His-tory. If the products are not listed, contact Cisco Stealthwatch Support.

l Hardware: If you have UCS hardware, add the license tokens to youraccount as shown in the Adding License Tokens to Your Account section.

l Virtual Appliances (VE): Stealthwatch Management Console VE and FlowCollector VE licenses are included in the Enterprise Agreement purchase.For provisioning details, refer to Enterprise Agreement Customers sectionin the Introduction. If you purchased any additional virtual appliances, addthe license tokens for these appliances to your account as shown in theAdding License Tokens to Your Account section.

If you do not have additional products to add, go to Downloading StealthwatchSoftware.

Adding License Tokens to Your AccountTo add license tokens to your account, complete the following steps:

1. Log in to the Download and License Center (https://stealth-watch.flexnetoperations.com).

2. On the left navigation pane, click Add License Tokens.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 11 -

Adding License Tokens to Your Account

3. Enter one PAK or License Token in each field.

4. Click Register.5. If you have additional tokens to register, repeat the steps in this section.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 12 -

Adding License Tokens to Your Account

Downloading Stealthwatch SoftwareComplete the steps in this section to install a new Stealthwatch virtual appliance (forexample, Stealthwatch Flow Sensor VE) or to update your appliance software.

Installing a New Virtual Appliance

1. Log in to the Download and License Center (https://stealth-watch.flexnetoperations.com).

2. On the left navigation pane, click Downloads.3. Click Deploy Stealthwatch.

4. Click the applicable appliance.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 13 -

Adding License Tokens to Your Account

5. Click the OVF link for the version you want to deploy.

If you do not see the software link for your appliance, confirm the LicenseToken has been added to your account. Refer to Adding License Tokens toYour Account for details.

6. Save the files to the preferred location.

7. Install and configure the VE appliance according to the Stealthwatch Installationand Configuration Guide v7.1.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 14 -

Adding License Tokens to Your Account

Make sure you install the appliances and follow the configuration order usingthe procedures provided in the Stealthwatch Installation and ConfigurationGuide v7.1.

8. If you have additional appliances to install, repeat the steps in this section.

Installing a New KVMVirtual Appliance

1. Log in to the Download and License Center (https://stealth-watch.flexnetoperations.com).

2. On the left navigation pane, click Downloads.3. Click Deploy Stealthwatch.

4. Click the applicable appliance.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 15 -

Adding License Tokens to Your Account

5. Click the ISO link for the version you want to deploy.

If you do not see the software link for your appliance, confirm the LicenseToken has been added to your account. Refer to Adding License Tokens toYour Account for details.

6. Save the files to the preferred location.

7. Install and configure the VE appliance according to the Stealthwatch Installationand Configuration Guide v7.1.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 16 -

Adding License Tokens to Your Account

Make sure you install the appliances and follow the configuration order usingthe procedures provided in the Stealthwatch Installation and ConfigurationGuide v7.1.

8. If you have additional appliances to install, repeat the steps in this section.

Updating Software

1. Log in to the Download and License Center (https://stealth-watch.flexnetoperations.com).

2. On the left navigation pane, click Downloads.3. Click Upgrade Stealthwatch.

4. Click the applicable appliance.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 17 -

Adding License Tokens to Your Account

5. Click the SWU link for the applicable upgrade version.

6. Save the files to the preferred location.

7. Install the software update according to the applicable Stealthwatch UpdateGuide.

Make sure you follow the software update order using the procedures providedin the applicable Stealthwatch Update Guide.

8. If you have additional appliances to update, repeat the steps in this section.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 18 -

Adding License Tokens to Your Account

Registering Your Stealthwatch AppliancesUse the following instructions to register each hardware appliance and virtualappliance in the Download and License Center.

Before you register the appliance, confirm the following: 

l UCS Hardware Appliances: The appliance must be installed and configuredaccording to the Stealthwatch x210 Series Hardware Installation Guide and theStealthwatch Installation and Configuration Guide v7.1.

l Virtual Appliances: The appliance must be installed and configured according tothe Stealthwatch Installation and Configuration Guide v7.1.

l License Token: The appliance License Token must be added to your Downloadand License Center account (refer to Adding License Tokens to Your Account).

Copy the Appliance Serial NumberThe appliance serial number is required to complete registration. You can get the serialnumber for most appliances using Central Management. If you need the serial numberfor a standalone appliance, use Admin Appliance.

Copy the Serial Number fromCentral ManagementTo copy the serial number from Central Management, complete the following steps:

1. In your browser address field, type https:// followed by the IP address of the SMC.The Login page opens.

2. Log in as the admin user with the password you defined when you configured theappliance.

3. Click the Global Settings icon ( ).

4. Click Central Management.5. Copy the serial number for the appliance and paste it into a text editor or directly

into the Serial field (refer to Register the Appliance).

The serial number is shown under the appliance type. The serial number beginswith the appliance abbreviation. For example, the Stealthwatch Management Consolebegins with SMC.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 19 -

Adding License Tokens to Your Account

Copy the Serial Number from the Appliance Admin InterfaceTo copy the serial number from the appliance Admin Home page, complete the followingsteps:

1. In your browser address field, type https:// followed by the IP address of the appli-ance.

2. Log in as the admin user with the password you defined when you configured theappliance.

3. Scroll down to the System section.

4. Copy the serial number and paste it into a text editor or directly into the Serial field(refer to Register the Appliance).

The serial number is shown in the System section of the appliance Admin Homepage. The serial number begins with the appliance abbreviation. For example, the UDPDirector begins with UD.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 20 -

Adding License Tokens to Your Account

Make sure you use an ASCII text editor to paste the serial number. Do not use aword processing program to paste the serial number because it can introduceodd characters that will cause the serial number to be rejected when you try toregister it.

If you cannot access the appliance Admin Home page, contact Cisco StealthwatchSupport. If the product is UCS hardware, you will need the information shown on thehardware tag.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 21 -

Adding License Tokens to Your Account

Register the Appliance

1. Log in to the Download and License Center (https://stealth-watch.flexnetoperations.com).

2. On the left navigation pane, click Register Appliances.

3. In the Serial Number field, enter the appliance serial number.

4. Click Register Appliance.

The Confirm Appliance page opens indicating that the appliance was successfullyregistered to your account.

5. Optional: Type a descriptive name in the Alias field. Click Register Appliance.6. If you have additional appliances to register, repeat the steps in this section

Register the Appliance.7. Go to Add Licenses and Features to the Account next in this guide.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 22 -

Adding License Tokens to Your Account

Add Licenses and Features to the AccountUse the following instructions to add licenses and features to each appliance on youraccount. You can also use this procedure to update your licenses and features. Forexample, if you purchased additional flows per second, use this procedure to update theSMC license with the additional flows.

You must activate new licenses before the 90-day trial period expires. Other-wise, the appliance will stop functioning, and you will be unable to use it.

1. On the left navigation pane, clickMy Appliances.2. Click the appliance serial number.

To search for an appliance, enter the serial number or alias in the providedfields. Click Filter.

3. Review your appliance requirements in the following Licenses and Features table.

Appliance Licenses Features

Flow Collector FCBASE n/a

Flow Sensor FSBASE n/a

SMC SMCBASE* Flow Rate License (FPS): required

Cloud License (refer to the CloudLicense Configuration Guide forinformation)

Endpoint License

IDentity License

Threat Intelligence License

UDP Director UDVE, UD2200 UDP Director: required

*SMC Failover: You can establish a failover relationship between two SMCs so that one of them serves as abackup console to the other.

l The SMCRED license is activated with the SMCBASE and allows an SMC to act as a redundant, or sec-ondary, SMC.

l Make sure the primary and secondary SMCs have the same software version, and make sure both SMCshave licenses that match and resources that match.

l Combining virtual and hardware appliances is acceptable if the series and generations match.

Contact Stealthwatch Customer Support for details.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 23 -

Adding License Tokens to Your Account

The available features are determined by the appliance and features you havepurchased. For the current list of features, or to purchase additional licensesand features, contact your Cisco Partner.

4. Do one of the following:

l To use the appliance base license without additional features, go tostep 7.

l To add features to the appliance, click Add Features. Refer to theLicenses and Features table (above) for details.

5. In the Qty to Add column, type the number of units for each feature you need touse.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 24 -

Adding License Tokens to Your Account

6. Click Add Features.7. If the appliance has Internet access, go to the next step.

If the appliance does not have Internet access, click Download License.Save the license BIN file. You can save it to a local hard drive, network location, orportable drive.

You must activate the downloaded license (BIN) file on your appliance within 72hours. If the 72 hours expires, repeat this step to download new license files.

8. If you have additional licenses or features to add, repeat the steps in this sectionAdd Licenses and Features to the Account.

9. Go to Activating Licenses on Your Appliances.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 25 -

Adding License Tokens to Your Account

Activating Licenses on Your AppliancesThe Download and License Center allows you to add licenses and features to youraccount. To use the appliance, the licenses and features must be activated on theappliance.

Whether using online or offline activation, activate the licenses on the SMCfirst.

Process Overview1. Activate licenses on the SMC.

l If the SMC has Internet access, use Activating Licenses Online.l If the SMC does not have Internet access, use Activating Licenses Off-line.

2. Activate licenses on standalone appliances (not managed by the SMC) or any indi-vidual appliances as needed.

l If the appliance has Internet access, use Activating Licenses Online.l If the appliance does not have Internet access, use Activating LicensesOffline.

Activating Licenses OnlineThe best way to manage your license activation is on the SMC with Internet access. If anappliance is not managed by the SMC, you can activate the license on the appliance indi-vidually, and you can activate a license on an individual appliance at any time.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 26 -

Activating Licenses on Your Appliances

Preparing the Appliance for Online License Activation1. In the Download and License Center, the appliance should be registered, and its

related licenses and features should be added to the account. Refer to Registeringand Licensing Process Overview for details.

2. Review the configuration requirements for the SMC or standalone appliance, as fol-lows:

ApplianceConfiguration Requirements

InternetAccess

Internet Proxy Server andDNS Server

Appliances Managed bythe SMC

SMC required Configure the Inter-net proxy server (ifapplicable to your net-work) and the DNSserver on the SMCappliance.

Confirm there is aclear path of com-munication betweenthe SMC and man-aged appliances viaHTTPS over port 443.

Standalone Appliance(not managed by theSMC)

required Configure the Inter-net proxy server (ifapplicable to your net-work) and the DNSserver on the appli-ance.

n/a

3. Use the method applicable to your system configuration:

l SMC: You can activate and manage the licenses for the SMC and configuredappliances using the following procedure: 

o Activating Licenses Online with the Web Client (Recommended)o Activating Licenses Online with the Desktop Client

l Standalone/Individual Appliance: If the appliance is not managed by Cen-tral Management, or to activate a license on an individual appliance, use thefollowing procedure: 

o Activating Licenses Online with the Web Client for StandaloneAppliances

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 27 -

Activating Licenses on Your Appliances

Activating Licenses Online with the Web Client (Recommended)Use the following instructions to activate licenses on the SMC or any individualappliance.

This method is used for activating licenses on the selected individual applianceonly. If you activate licenses on the SMC using this method, it does not activatelicenses on the appliances it manages.

1. Review Preparing the Appliance for Online License Activation.2. In your browser address field, type https:// followed by the IP address of the SMC.

The Login page opens.

3. Log in as the admin user with the password you defined when you configured theappliance.

4. Click the Global Settings icon ( ).

5. Click Central Management.6. On the Appliance Manager inventory page, click the Actions menu for the primary

SMC. Select Edit Appliance Configuration.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 28 -

Activating Licenses on Your Appliances

7. Click the Network Services tab. Confirm the DNS servers are configured.

8. If your system uses an Internet proxy server, click Enable under the Internet Proxysection and configure the proxy server settings. Click Apply Settings.

9. Click Appliance Manager to return to the Appliance Manager inventory page.10. Click the Actions menu for the primary SMC. SelectManage Licenses.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 29 -

Activating Licenses on Your Appliances

11. In the Choose the Activation Method section, select Online Licensing.

12. Click Activate.13. Follow the on-screen prompts to finish the license activation.

14. Continue with the configuration process.

l Use the Stealthwatch x210 Series Hardware Installation Guide and theStealthwatch Installation and Configuration Guide v7.1 to finish theconfiguration.

l If you purchased the Threat Intelligence License, enable the feed usingthe configuration instructions.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 30 -

Activating Licenses on Your Appliances

Activating Licenses Online with the Web Client for StandaloneAppliancesUse the following instructions to activate licenses on a standalone appliance.

1. Review Preparing the Appliance for Online License Activation.2. In your browser address field, type https:// followed by the IP address of the stan-

dalone appliance. The Login page opens.

3. Log in as the admin user with the password you defined when you configured theappliance.

4. Click Configuration > Licensing.5. In the Choose the Activation Method section, select Online Licensing.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 31 -

Activating Licenses on Your Appliances

6. Click Activate.7. Continue with the configuration process.

l Use the Stealthwatch x210 Series Hardware Installation Guide and theStealthwatch Installation and Configuration Guide v7.1 to finish theconfiguration.

l If you purchased the Threat Intelligence License, enable the feed usingthe configuration instructions.

Activating Licenses Online with the Desktop ClientThis method activates licenses on the SMC and the appliances it manages.

To install the Stealthwatch Desktop Client, refer to the StealthwatchInstallation and Configuration Guide v7.1.

Use the following instructions to activate licenses on the SMC using the Desktop Client.

1. Review Preparing the Appliance for Online License Activation.2. Log in to the Stealthwatch Desktop Client as the admin user with the password

you defined when you configured the appliance.

3. Click License Manager. The License Manager dialog box opens.

To license new features after initial configuration: Log into the StealthwatchDesktop Client. Click Help > License Management to open the dialog box.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 32 -

Activating Licenses on Your Appliances

4. Click Activate License.5. Click Online Activation.

6. Click the DNS server link to configure the settings as needed.

7. Click the Proxy server link to configure the settings as needed.

8. Click Continue. Follow the on-screen prompts.

9. Click Close to close the License Manager dialog box.

10. Continue with the configuration process.

l Use the Stealthwatch x210 Series Hardware Installation Guide and theStealthwatch Installation and Configuration Guide v7.1 to finish theconfiguration.

l If you purchased the Threat Intelligence License, enable the feed usingthe configuration instructions.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 33 -

Activating Licenses on Your Appliances

Activating Licenses OfflineIf the SMC or individual appliance does not have Internet access, use the instructions inthis section to activate your licenses offline. However, note that the license files (BIN)must be downloaded from the Download and License Center, which requires Internetaccess. Refer to Add Licenses and Features to the Account for details.

Preparing the Appliance for Offline License Activation1. Download the license and feature license BIN files from the Download and License

Center. Refer to Add Licenses and Features to the Account for details.

2. Use the method applicable to your system configuration:

l SMC: You can activate and manage the licenses for the SMC and configured appli-ances using Activating Licenses Offline with the Desktop Client.

l Standalone/Individual Appliance: If the appliance is not managed by the SMC,or to activate a license on an individual appliance, use Activating Licenses Offlinewith the Web Client.

Activating Licenses Offline with the Web ClientUse the following instructions to activate licenses on the SMC or an individualappliance.

This method is used for activating licenses on the selected individual applianceonly. If you activate licenses on the SMC using this method, it does not activatelicenses on the appliances it manages.

1. Review Preparing the Appliance for Offline License Activation.2. In your browser address field, type https:// followed by the IP address of the SMC.

The Login page opens.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 34 -

Activating Licenses on Your Appliances

3. Log in as the admin user with the password you defined when you configured theappliance.

4. Click the Global Settings icon ( ).

5. Click Central Management.6. Click the Actions menu for the primary SMC. SelectManage Licenses.

7. In the Choose the Activation Method section, select Offline Licensing.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 35 -

Activating Licenses on Your Appliances

8. Click Browse.9. Select the saved licensing (BIN) file.

10. Click Activate.11. Follow the on-screen prompts to finish the license activation.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 36 -

Activating Licenses on Your Appliances

Activating Licenses Offline with the Desktop ClientYou can activate licenses on appliances managed by the SMC using this method byselecting the appliance tab in License Management.

To install the Stealthwatch Desktop Client, refer to the StealthwatchInstallation and Configuration Guide v7.1.

Use the following instructions to activate licenses on the SMC using the Desktop Client.

1. Review Preparing the Appliance for Offline License Activation.2. Log in to the Stealthwatch Desktop Client as the admin user with the password

you defined when you configured the appliance.

3. Click License Manager. The License Manager dialog box opens.

To license new features after initial configuration: Log into the StealthwatchDesktop Client. Click Help > License Management to open the dialog box.

4. Click the appliance tab.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 37 -

Activating Licenses on Your Appliances

5. Click Activate License.6. Click Offline Activation.

7. Click Browse.8. Select the saved licensing (BIN) file.

9. Follow the on-screen prompts to finish the license activation.

10. Continue the configuration process.

l Use the Stealthwatch x210 Series Hardware Installation Guide and theStealthwatch Installation and Configuration Guide v7.1 to finish theconfiguration.

l If you purchased the Threat Intelligence License, enable the feed usingthe configuration instructions.

11. Repeat steps 5 through 10 to update another appliance managed by the SMC.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 38 -

Activating Licenses on Your Appliances

Reviewing License StatusIt is important to keep your product licenses current. For example, if the Flow RateLicense expires, the Flow Collectors in the Stealthwatch system may stop collectingflow data.

Use the License Management page to review the status of your product licenses. Youcan open License Management from the SMC Central Management, Appliance Admininterface, or Desktop Client.

l Required Licenses: Some feature licenses are required for your product to func-tion. For the list of licenses, refer to Add Licenses and Features to the Account.

l Notifications: If a license is missing or expired, the appliance displays a noti-fication when you log in. To receive an email notification before a license expires,refer to Configuring License Expiration Notifications.

l Support: To obtain a new license, update an existing license, or for help with acorrupt license, contact your local Cisco Partner or Cisco Stealthwatch Support.

Opening License Management from Central ManagementTo open License Management from Central Management, complete the following steps:

1. In your browser address field, type https:// followed by the IP address of the SMC.The Login page opens.

2. Log in as the admin user with the password you defined when you configured theappliance.

3. Click the Global Settings icon ( ).

4. Click Central Management.5. Review the Appliance Manager License Status column. Click the Action menu for

the SMC or other appliance, then clickManage Licenses.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 39 -

Reviewing License Status

The status of a secondary SMC may show "Status Not Available". Go to theLicense Manager to review details.

6. The License Management page opens. (You might be prompted to log in to theappliance at this step.)

7. In the Feature License Status section, review the status of each license installedon the appliance. It is important to note the expiration date and status for eachlicense.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 40 -

Reviewing License Status

Opening License Management from the Appliance AdminInterfaceThe Appliance Admin interface allows you to review the license status for thestandalone appliance. To open License Management from the Appliance Admininterface, complete the following steps:

1. In your browser address field, type https:// followed by the IP address of the appli-ance. The Login page opens.

2. Log in as the admin user with the password you defined when you configured theappliance.

3. Click Configuration > Licensing. The License Management page opens.4. In the Feature License Status section, review the status of each license installed

on the appliance. It is important to note the expiration date and status for each fea-ture.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 41 -

Reviewing License Status

Opening License Management from the Desktop ClientThe Stealthwatch Desktop Client allows you to review the license status of eachappliance managed by the SMC.

To install the Stealthwatch Desktop Client, refer to the StealthwatchInstallation and Configuration Guide v7.1.

1. Log in to the Stealthwatch Desktop Client as the admin user.

2. Click Help > License Management to open the dialog box.3. Click the appliance tab.

4. Review the status of each license installed on the appliance. It is important to notethe expiration date and status for each feature.

5. Repeat steps 3 and 4 for each appliance managed by the SMC.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 42 -

Reviewing License Status

Configuring License Expiration NotificationsYou can use the Stealthwatch Desktop Client to manage your license notifications. Usethe following instructions to set up an email notification for your appliance licenseexpiration, corruption, or unlicensed products. If an appliance license expires, theappliance may stop collecting flow, so it is important to keep licenses up to date.

License Status: To review your appliance license status, refer to Reviewing LicenseStatus.

Add a User Email Address to your AccountUse the following instructions to add a user to your account. This user will receive theemail notification you configure. If the user is already set up in the system, use theseinstructions to confirm the email address is accurate.

1. Log in to the Stealthwatch Desktop Client as the admin user.

2. Select SMC in the left navigation pane.

3. Click the Configuration tab.

4. Click Properties.5. In the SMTP Relay Address field, enter the SMTP relay address of the email recip-

ient.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 43 -

Configuring License Expiration Notifications

6. Optional: In the From Email Address field, enter an email address to helpidentify the source in the recipient's email filters (forexample: [email protected]).

7. Click Apply.8. Go back to the Configuration tab, then click User Management.9. In the left navigation pane, click Users.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 44 -

Configuring License Expiration Notifications

10. To add a new user, click Add.

To select a current user, double-click the name of the user in the list.

11. Complete the fields for the new or current user.

12. Enter the user's email address.

13. Click OK.14. Click Close.

Create a License RuleUse the following instructions to create license notification rules for license expiration,corruption, or unlicensed products.

1. Click the Configuration tab.

2. Click Response Management.3. In the left navigation pane, click Rules.4. Click Add.5. Click Stealthwatch Management Console System Alarm (or click the rule type

for another appliance).

6. Click OK.7. Complete the Name and Description fields for your Licensing Rule.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 45 -

Configuring License Expiration Notifications

8. Click the Enabled check box to add a check mark to it.

l To create a rule, click the ... ellipsis button.l Click the drop-down box and select a rule.

9. To add more rules, repeat step 8.

10. Do not close the dialog box. Go to the next step, Create the Email Notification.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 46 -

Configuring License Expiration Notifications

Create the Email Notification1. In the left navigation pane, click Actions.2. In the Execute the following actions when the Alarm becomes active section, click

Add.

3. Click Add.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 47 -

Configuring License Expiration Notifications

4. In the Action type dialog box, click Email.5. In the Add Email Action dialog box, complete all fields to create the email noti-

fication.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 48 -

Configuring License Expiration Notifications

6. Click OK.7. Select the action created and click OK.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 49 -

Configuring License Expiration Notifications

Test the Email Notification1. In the left navigation pane, click Actions.2. Click Add.

3. Select the action name and click Edit.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 50 -

Configuring License Expiration Notifications

4. Click Test.

5. Check the email recipient account to confirm receipt of the test email.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 51 -

Configuring License Expiration Notifications

Updating or Purchasing LicensesIt is important to keep your product licenses current. For example, if the Flow RateLicense expires, the Flow Collectors in the Stealthwatch system may stop collectingflow data. To obtain a new license, update an existing license, or for help with a corruptlicense, contact your local Cisco Partner or Cisco Stealthwatch Support.

Copyright © 2019 Cisco Systems, Inc. All rights reserved. - 52 -

Updating or Purchasing Licenses

Copyright InformationCisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affil-iates in the U.S. and other countries. To view a list of Cisco trademarks, go to thisURL: https://www.cisco.com/go/trademarks. Third-party trademarks mentioned arethe property of their respective owners. The use of the word partner does not imply apartnership relationship between Cisco and any other company. (1721R)

Copyright © 2019 Cisco Systems, Inc.

All rights reserved.