Wanguard 6.2 User Guide
Wanguard Installation
Licensing Procedure
When the trial period is over you will have to purchase as many Sensor and Filter licenses (subscriptions) as
the number of Sensors and Filters configured and enabled in Configuration » Components.
➢
You will need as many Sensor licenses as the number of flow exporters (usually border or edge routers)
monitored by Flow Sensors. Flow Sensor does not have a limit on the number of interfaces it can
monitor. If you want to monitor many routers having a single interface, contact <sales@andrisoft.com>.
➢
You will need as many Sensor licenses as the number of interfaces (ports) listened by Packet Sensors.
Multiple Packet Sensors listening to the same interface (e.g. when using a multi-queue NIC) use a single
Sensor license. Packet Sensor can monitor an unlimited number of IPs/domains.
➢
You can mix Wanguard Sensor licenses with WanSight Sensor licenses.
➢
You will need as many Wanguard Filter licenses as the number of Filters enabled in Configuration »
Components. A single Packet Filter can clean the traffic received from multiple parts of the network, but
it can listen to a single interface (port). Multiple Flow Sensors can use a single Flow Filter. Wanguard
Filter works only in conjunction with Wanguard Sensor.
➢
Sensor Cluster and Filter Cluster are free and do not require licensing.
➢
Console is free and it does not require licensing.
You can distribute the licensed Sensors and Filters on any number of servers without additional licensing
costs. The license key must contain the hardware keys listed under Configuration » General Settings » License
Manager » Requirements. The minimum licensing period is 12 months.
Quick Configuration Steps
➔
Estimate storage requirements, review decoders and IP graph settings – page 20
➔
Setup anomaly detection parameters and decoders – page 23
➔
Configure the reaction to traffic anomalies – page 27
➔
Add your IP address ranges and important hosts to an IP Zone – page 34
➔
Configure anomaly detection for prefixes, create threshold templates – page 35
➔
Add a Packet Sensor – page 38, Flow Sensor – page 42, or SNMP Sensor – page 47
➔
Configure BGP Connectors for black hole routing or traffic diversion – page 51
➔
For DDoS mitigation add a Packet Filter – page 55, or a Flow Filter – page 60
➔
Watch the event log. Receive error notifications by email – page 69
➔
Generate reports and send them periodically by email – page 68
➔
Create dashboards and add widgets containing useful information – page 98
➔
Create personalized Console accounts for your staff or customers – page 71
- 18 -
Summary of Contents for wanguard 6.2
Page 1: ......
