Warning: You are viewing an older version of this documentation. Most recent is here: 40.0.1

Licensing¶

How Licensing Works¶

We offer a simple licensing model based on the monitored data rate of each connected Stamus Network Probe at 100 Mbps, 1 Gbps, 10 Gbps, or 40 Gbps increments. The software is licensed annually, and multiple years may be purchased together.

All licenses include software maintenance and support with new software updates approximately every 3 months.

For on-premise installations, you may optionally choose to purchase turnkey appliances for Stamus Network Probes and/or the Stamus Central Server central management and analysis system. These appliances are pre-configured, ready-to-install, and fully-supported by Stamus Networks. And they include next business day repair and replacement.

If you wish, you may install software on your own hardware (VM or bare metal) up to 10 Gbps. For 40 Gbps or greater Stamus Network Probe installations, we require Stamus Network Appliances to ensure the system meets its performance objectives.

Example

Let’s assume a fictive company having already deployed a Suricata sensor on a 1 Gb/s link to monitor part of its network.

This company now wants to increase its network visibily and choose to deploy, in addition to the existing vanilla Suricata, 2 Stamus Network Probes on 10 Gb/s links. To be able to manage all 3 probes from Stamus Central Server, this company would need 3 licences: two 10G licenses and one 1G license.

Note

If you are a Managed Security Services Provider (MSCS), we also offer a usage-based pricing model to only pay for the data analysed by the network probes. Contact your Sales representative for more information or contact us at sales@stamus-networks.com.

Stamus Licenses Comparison¶

This following table illustrates the difference between Stamus ND and Stamus NDR.

Capability	Stamus ND	Stamus NDR	Description
Rules-based Detection	Yes	Yes	Detect threats using signatures, from third-party providers (free or paid) or create your own
Threat Intelligence (Reputation list) Detection	Yes	Yes	Use IP/Domain/etc reputation lists from third-party providers to detect threats
Complete Network Capture	Yes	Yes	Captures NSM data, Flows, IDS alerts, PCAP, and files with a single engine optimized for performance
Enrichement	Yes	Yes	Events are enriched with contextual information such as Network Definitions
Tagging	Yes	Yes	Create Filters & Policies to automatically tag alerts as Relevant or Informational (for historic and future events)
Guided Threat Hunting	Yes	Yes	Benefits from pre-defined Filter Sets by Stamus Threat Reasearch Team to start hunting right away and easy pivoting
REST-API	Yes	Yes	Access all the system’s configuration and data via REST API for integration with other systems and customized remote management
Declaration of Compromise ™	No	Yes	Additional layer of detection analytics that identifies a sequence of threats against an asset, and only alerts on serious and imminent threats
Beacon Detection (ML)	No	Yes	Detect beacons using machine learning and algorithmic detection
Sighting Detection	No	Yes	Detect anomalous and suspicious activity using machine learning and algorithmic detection
Assets Insights	No	Yes	An asset-centric view of a threat’s progression along the Cyber Kill Chain. Identifies all host-related activity on your network and tracks it over time.
Custom Declaration of Compromise ™	No	Yes	Escalate your own detections to Declaration of Comprise
Webhook Notifications	No	Yes	Webhook mechanism allows push data to others systems such as a Ticketing system, a SOAR, a SIEM, a Messaging app, etc
Proofpoint ETPro Subscription	No	Yes	Bundled subscription to the world’s best signatures provider, Proofpoint ETPro ruleset (updated daily).

Note

In a nutshell, the Stamus ND will get you “a better IDS” while the Stamus NDR will unlock all the features of Stamus Central Server for a complete Network Detection & Response solution that allows gradually growing to advanced analytics, automated responses and much more.

Sales Trial License¶

A Sales Trial license is for preparing a pilot project or a proof of concept prior a deployment. Ask your sales representative if you already are a customer or contact us by email at sales@stamus-networks.com.

The Sales Trial license is:

Free
Limited to 30 days (may be extended under some circumstances)
Has no technical limitations except the hardware (or VM) you choose (we can also provide Appliances depending on your bandwidth requirements)

Installing a license¶

Installing a license is a two steps process:

Send to your Sales representative your Unique ID
Receive back the generated license for your system.

Generate your SCS Unique ID¶

To generate your SCS Unique ID, follow those steps:

Log in to Stamus Central Server
Go under Probe Management
Click on the Stamus Networks logo in the upper left to pull down the System menu
Click “System license” from the menu
In the left side Action menu, click on “Get Unique SCS ID”
Download the file and email it to support@stamus-networks.com

Once received, our Stamus Software Support team will send you back your license file.

Install the license¶

Once you have received your license file, first place the license file to a location that it can be uploaded to Stamus Central Server. It can be your computer’s Desktop or any other workstations (especially in closed environments).

Then, install it using the following steps:

Log in to Stamus Central Server
Go under Probe Management
Click on the Stamus Networks logo in the upper left to pull down the System menu
Click “System license” from the menu
Click the “Choose File” button and choose the license file you downloaded
Click “Upload” to upload the new License

You are all set ! The page should refresh with the appropriate expiration date.