Warning: You are viewing an older version of this documentation. Most recent is here: 40.0.1

Licensing

How Licensing Works

We offer a simple licensing model based on the monitored data rate of each connected Stamus Network Probe at 100 Mbps, 1 Gbps, 10 Gbps, or 40 Gbps increments. The software is licensed annually, and multiple years may be purchased together.

All licenses include software maintenance and support with new software updates approximately every 3 months.

For on-premise installations, you may optionally choose to purchase turnkey appliances for Stamus Network Probes and/or the Stamus Central Server central management and analysis system. These appliances are pre-configured, ready-to-install, and fully-supported by Stamus Networks. And they include next business day repair and replacement.

If you wish, you may install software on your own hardware (VM or bare metal) up to 10 Gbps. For 40 Gbps or greater Stamus Network Probe installations, we require Stamus Network Appliances to ensure the system meets its performance objectives.

Example

Let’s assume a fictive company having already deployed a Suricata sensor on a 1 Gb/s link to monitor part of its network.

This company now wants to increase its network visibily and choose to deploy, in addition to the existing vanilla Suricata, 2 Stamus Network Probes on 10 Gb/s links. To be able to manage all 3 probes from Stamus Central Server, this company would need 3 licences: two 10G licenses and one 1G license.

Note

If you are a Managed Security Services Provider (MSCS), we also offer a usage-based pricing model to only pay for the data analysed by the network probes. Contact your Sales representative for more information or contact us at sales@stamus-networks.com.

Stamus Licenses Comparison

This following table illustrates the difference between Stamus ND and Stamus NDR.

Capability

Stamus ND

Stamus NDR

Description

Rules-based Detection

Yes

Yes

Detect threats using signatures, from third-party providers (free or paid) or create your own

Threat Intelligence (Reputation list) Detection

Yes

Yes

Use IP/Domain/etc reputation lists from third-party providers to detect threats

Complete Network Capture

Yes

Yes

Captures NSM data, Flows, IDS alerts, PCAP, and files with a single engine optimized for performance

Enrichement

Yes

Yes

Events are enriched with contextual information such as Network Definitions

Tagging

Yes

Yes

Create Filters & Policies to automatically tag alerts as Relevant or Informational (for historic and future events)

Guided Threat Hunting

Yes

Yes

Benefits from pre-defined Filter Sets by Stamus Threat Reasearch Team to start hunting right away and easy pivoting

REST-API

Yes

Yes

Access all the system’s configuration and data via REST API for integration with other systems and customized remote management

Declaration of Compromise ™

No

Yes

Additional layer of detection analytics that identifies a sequence of threats against an asset, and only alerts on serious and imminent threats

Beacon Detection (ML)

No

Yes

Detect beacons using machine learning and algorithmic detection

Sighting Detection

No

Yes

Detect anomalous and suspicious activity using machine learning and algorithmic detection

Assets Insights

No

Yes

An asset-centric view of a threat’s progression along the Cyber Kill Chain. Identifies all host-related activity on your network and tracks it over time.

Custom Declaration of Compromise ™

No

Yes

Escalate your own detections to Declaration of Comprise

Webhook Notifications

No

Yes

Webhook mechanism allows push data to others systems such as a Ticketing system, a SOAR, a SIEM, a Messaging app, etc

Proofpoint ETPro Subscription

No

Yes

Bundled subscription to the world’s best signatures provider, Proofpoint ETPro ruleset (updated daily).

Note

In a nutshell, the Stamus ND will get you “a better IDS” while the Stamus NDR will unlock all the features of Stamus Central Server for a complete Network Detection & Response solution that allows gradually growing to advanced analytics, automated responses and much more.

See also

Alternatively, we may also want to give a try to our Open Source solution SELKS.

Sales Trial License

A Sales Trial license is for preparing a pilot project or a proof of concept prior a deployment. Ask your sales representative if you already are a customer or contact us by email at sales@stamus-networks.com.

The Sales Trial license is:

  • Free

  • Limited to 30 days (may be extended under some circumstances)

  • Has no technical limitations except the hardware (or VM) you choose (we can also provide Appliances depending on your bandwidth requirements)

Installing a license

Installing a license is a two steps process:

  1. Send to your Sales representative your Unique ID

  2. Receive back the generated license for your system.

Generate your SCS Unique ID

To generate your SCS Unique ID, follow those steps:

  1. Log in to Stamus Central Server

  2. Go under Probe Management

  3. Click on the Stamus Networks logo in the upper left to pull down the System menu

  4. Click “System license” from the menu

  5. In the left side Action menu, click on “Get Unique SCS ID”

  6. Download the file and email it to support@stamus-networks.com

Once received, our Stamus Software Support team will send you back your license file.

Install the license

Once you have received your license file, first place the license file to a location that it can be uploaded to Stamus Central Server. It can be your computer’s Desktop or any other workstations (especially in closed environments).

Then, install it using the following steps:

  1. Log in to Stamus Central Server

  2. Go under Probe Management

  3. Click on the Stamus Networks logo in the upper left to pull down the System menu

  4. Click “System license” from the menu

  5. Click the “Choose File” button and choose the license file you downloaded

  6. Click “Upload” to upload the new License

You are all set ! The page should refresh with the appropriate expiration date.