What is a Cisco SNA License?

Cisco SNA License (Cisco Secure Network Analytics, formerly Stealthwatch) enables network flow analytics for real-time threat detection, investigation, and visibility across enterprise networks.

Is Cisco SNA the same as Cisco Stealthwatch?

Cisco SNA refers to Cisco Secure Network Analytics, which is the current naming for what many teams previously called Cisco Stealthwatch. Licensing and components map to the same core flow analytics architecture.

Which Cisco SNA components typically require licensing?

Common components include Management Console, Flow Collectors, Flow Sensors, Data Store, and UDP Director, available as appliances or Virtual Editions depending on deployment needs.

How do I choose the right Cisco Secure Network Analytics license?

Start with deployment type (appliance vs virtual), then size expected flow rate, number of monitored sites, retention requirements, and integration needs (SIEM/SOAR).

Can Cisco SNA be deployed in virtual environments?

Yes. Cisco Secure Network Analytics supports Virtual Edition deployments, allowing flexible rollout in data centers and private cloud environments.

What information should I send to get an accurate Cisco SNA quote?

Share your target flow rate, number of sites, required components (Flow Sensor/Collector/Manager), and whether you prefer appliance or Virtual Edition—then we can recommend the best-fit SKUs and subscription term.

Cisco SNA License

Name: Cisco SNA License | Secure Network Analytics (Stealthwatch)
Rating: 4.00 (1 reviews)

Cisco SNA License (Cisco Secure Network Analytics, formerly Stealthwatch) unlocks network flow analytics for real-time threat detection, anomaly hunting, and encrypted traffic visibility—so SOC teams can spot lateral movement and data exfiltration faster across on-prem and virtual deployments.

Product information
Customer reviews

Categories	Analytics, Automation, Security
Part Number	L-ST-FC-VE-K9, L-ST-FS-VE-K9, L-ST-SMC-VE-K9, L-ST-UDP-VE-K9

1 review for Cisco SNA License

Rated 4 out of 5

henry h – June 11, 2025

Best

Add a review

Cisco SNA License (Cisco Secure Network Analytics / Stealthwatch)

Cisco SNA License (Cisco Secure Network Analytics, formerly Stealthwatch) is a comprehensive solution designed to empower organizations with advanced network visibility, threat detection, and security analytics. The Cisco SNA License makes it possible to continuously monitor network traffic, spot suspicious activity, and react quickly to new threats by utilizing Cisco’s industry-leading technologies. Businesses, banks, government organizations, and data centers that need to adhere to stringent data security regulations and need strong defense against advanced cyberthreats must have this license.

Cisco SNA License enables network flow analytics to detect threats that traditional logs miss—giving your SOC real-time visibility into “who talked to whom”, abnormal behaviors, and hidden lateral movement.

What you get with Cisco Secure Network Analytics licensing

Network flow analytics for enterprise-wide visibility (NetFlow/IPFIX-based monitoring)
Real-time anomaly detection for malware activity, DDoS patterns, and data exfiltration indicators
Encrypted traffic visibility (behavior + metadata signals) to reduce blind spots
Risk scoring, investigation workflows, and compliance-ready reporting
Integrations for SOC operations (SIEM/SOAR workflows and Cisco security ecosystem)

Best-fit Cisco SNA Use Cases

Detect lateral movement inside segmented networks (campus, DC, hybrid)
Identify exfiltration and suspicious outbound beacons early
Support incident response with flow-based forensic timelines
Monitor critical environments (banks, government, regulated data centers)

Cisco SNA License Features

A wide range of features provided by the Cisco Secure Network Analytics License revolutionize the way businesses protect and administer their networks. This is what makes it unique:

Threat Intelligence: Integrates with Cisco TALOS, one of the world’s largest threat intelligence platforms, to identify and prioritize global threats in real time.
Cognitive Defense: Uses advanced analytics to detect unusual network behaviors and predict emerging threats before they cause harm.
Machine Learning: Employs self-learning algorithms to automatically analyze network traffic, uncover hidden patterns, and identify malicious activities.
Network Segmentation: Enables isolation of infected network segments, preventing the spread of malware and limiting the impact of breaches.
Custom Alerts & Rules: Allows creation of tailored alerts and rules for detecting and responding to specific security threats.
Comprehensive Analytics: Delivers behavioral analytics, encrypted traffic analysis, and maintains a record of every network conversation for complete visibility.
Automated Response: Supports integration with security orchestration tools to automate threat response and streamline incident management.

Because of these characteristics, Cisco SNA License is an essential tool for businesses looking to improve their security posture, lower operational risk, and guarantee regulatory compliance.

Cisco Secure Network Analytics Architecture

The following can be deployed as virtual machine or appliances as Cisco Secure Network Analytics architecture:

Architecture components you can license (typical)

Cisco Stealthwatch Management Consoles
Cisco Stealthwatch Flow Collectors
Cisco Stealthwatch Flow Sensors
Cisco Stealthwatch Data Store
Cisco Stealthwatch UDP Directors
Cisco Stealthwatch Flow Rate Service Subscription
Cisco Stealthwatch Threat Intelligence License
Cisco Stealthwatch Analytics & Logging License

For centralized firewall event correlation alongside flow analytics, pair this with Cisco FMC License.

Cisco Secure Network Analytics License Part Numbers

Companies can implement the solution on-premises or in virtualized environments thanks to Cisco SNA Licenses, which come in both physical and virtual editions. To ensure flexibility and cost effectiveness, licenses can be scaled according to the number of nodes, flow rate, or particular network requirements.

Common Cisco SNA (Secure Network Analytics) license SKUs

Model	Description
L-ST-FS-VE-K9	Cisco Stealthwatch Flow Sensor, Virtual Edition
ST-FS1200-K9	Cisco Stealthwatch Flow Sensor 1200
ST-FS1210-K9	Cisco Stealthwatch Flow Sensor 1210
ST-FS2200-K9	Cisco Stealthwatch Flow Sensor 2200
ST-FS3200-K9	Cisco Stealthwatch Flow Sensor 3200
ST-FS3210-K9	Cisco Stealthwatch Flow Sensor 3210
ST-FS4200-K9	Cisco Stealthwatch Flow Sensor 4200
ST-FS4210-K9	Cisco Stealthwatch Flow Sensor 4210
ST-FS4240-K9	Cisco Stealthwatch Flow Sensor 4240

Cisco Stealthwatch Flow Rate Service Subscription Part Numbers

Part Number	Description
L-ST-FR-1Y-S1	1 YR Subs, 100-499
L-ST-FR-1Y-S10	1 YR Subs, 500,000-999,999
L-ST-FR-1Y-S11	1 YR Subs, 1M-2,499,999
L-ST-FR-1Y-S2	1 YR Subs, 500-2,499
L-ST-FR-1Y-S3	1 YR Subs, 2,500-4,999
L-ST-FR-1Y-S4	1 YR Subs, 5,000-9,999
L-ST-FR-1Y-S5	1 YR Subs, 10,000-24,999
L-ST-FR-1Y-S6	1 YR Subs, 25,000-49,999
L-ST-FR-1Y-S7	1 YR Subs, 50,000-99,999
L-ST-FR-1Y-S8	1 YR Subs, 100,000-249,999
L-ST-FR-1Y-S9	1 YR Subs, 250,000-499,999
L-ST-FR-3Y-S1	3 YR Subs, 100-499
L-ST-FR-3Y-S10	3 YR Subs, 500,000-999,999
L-ST-FR-3Y-S11	3 YR Subs, 1M-2,499,999
L-ST-FR-3Y-S2	3 YR Subs, 500-2,499
L-ST-FR-3Y-S3	3 YR Subs, 2,500-4,999
L-ST-FR-3Y-S4	3 YR Subs, 5,000-9,999
L-ST-FR-3Y-S5	3 YR Subs, 10,000-24,999
L-ST-FR-3Y-S6	3 YR Subs, 25,000-49,999
L-ST-FR-3Y-S7	3 YR Subs, 50,000-99,999
L-ST-FR-3Y-S8	3 YR Subs, 100,000-249,999
L-ST-FR-3Y-S9	3 YR Subs, 250,000-499,999
L-ST-FR-5Y-S1	5 YR Subs, 100-499
L-ST-FR-5Y-S10	5 YR Subs, 500,000-999,999
L-ST-FR-5Y-S11	5 YR Subs, 1M-2,499,999
L-ST-FR-5Y-S2	5 YR Subs, 500-2,499
L-ST-FR-5Y-S3	5 YR Subs, 2,500-4,999
L-ST-FR-5Y-S4	5 YR Subs, 5,000-9,999
L-ST-FR-5Y-S5	5 YR Subs, 10,000-24,999
L-ST-FR-5Y-S6	5 YR Subs, 25,000-49,999
L-ST-FR-5Y-S7	5 YR Subs, 50,000-99,999
L-ST-FR-5Y-S8	5 YR Subs, 100,000-249,999
L-ST-FR-5Y-S9	5 YR Subs, 250,000-499,999
L-ST-FR-LIC=	Flow Rate License (general SKU, may require further specification)

How to choose the right license (quick sizing checklist)

Deployment type: On-prem appliance vs Virtual Cloud Edition
Telemetry scope: which sites / VLANs / critical zones must be monitored
Capacity: expected flow rate and retention requirements
Operations: integrations (SIEM/SOAR), alerting, and reporting needs

Cisco SNA License Best Price and Offers

Need help selecting the correct Cisco SNA subscription and SKUs for your environment? Send your target flow rate + number of sites and we’ll recommend the right licensing mix and activation path.
Get in touch with Nethorizon team right now for the greatest rates, special deals, and knowledgeable advice catered to the requirements of your company. Our experts are prepared to assist you in selecting the best option for your setting and to walk you through the licensing procedure.

Inquiry