The Cisco Stealthwatch Network (SNO) v7.1 is a 2-day instructor-led or virtual instructor-led course offered by the Cisco Stealthwatch Learning Services team, which is designed for customers who are new to the Stealthwatch System and face specific challenges related to network health and maintenance. The course focuses on using the Stealthwatch System to enhance visibility and execute the performance monitoring activities required to maintain network health and information security.

This course is intended for individuals who are responsible for using the Stealthwatch System to monitor network performance and troubleshoot network issues.

Important note: This course is available only to qualified Cisco Stealthwatch customers.


  • After taking this course, you should be able to:
  • Explain how Stealthwatch uses network telemetry for visibility of network component
  • Describe how Stealthwatch can enhance performance monitoring
  • Describe the relationship between alarms and response management within the Stealthwatch System
  • Define the concept of the “network as a sensor”
  • Explain the concepts of visibility and monitoring as it pertains to an enterprise network


This course contains the following components:
  • Day One
    • Course Overview
    • Stealthwatch Technical Overview
    • Introduction to Network Operations
    • Proactive Monitoring
    • Lab: Validate Exporters
    • Lab: Manage Hosts and Host Groups
    • Proactive Monitoring
    • Lab: Utilize Maps
    • Lab: Configure Host Locking Rules
  • Day Two
    • Day One Review
    • Proactive Monitoring Continued
    • Lab: Create Custom Security Events
    • Lab: Manage Policies
    • Lab: Set Response Management Rules
    • Reactive Tasks
    • Lab: View Current Interfaces
    • Lab: Investigate Slow Response
    • Review the Web Application: What’s New?
    • Wrap Up

Prerequisite Knowledge

It is strongly recommended to complete the Stealthwatch Foundations training prior to taking this course.