Licensing¶
How Licensing Works¶
We offer a simple licensing model based on the monitored data rate of each connected Stamus Network Probe at 100 Mbps, 1 Gbps, 10 Gbps, or 40 Gbps increments. The software is licensed annually, and multiple years may be purchased together.
All licenses include software maintenance and support with new software updates approximately every 3 months.
For on-premise installations, you may optionally choose to purchase turnkey appliances for Stamus Network Probes and/or the Stamus Central Server central management and analysis system. These appliances are pre-configured, ready-to-install, and fully-supported by Stamus Networks. And they include next business day repair and replacement.
If you wish, you may install software on your own hardware (VM or bare metal) up to 10 Gbps. For 40 Gbps or greater Stamus Network Probe installations, we require Stamus Network Appliances to ensure the system meets its performance objectives.
Example
Let’s assume a fictive company having already deployed a Suricata sensor on a 1 Gb/s link to monitor part of its network.
This company now wants to increase its network visibily and choose to deploy, in addition to the existing vanilla Suricata, 2 Stamus Network Probes on 10 Gb/s links.
To be able to manage all 3 probes from Stamus Central Server, this company would need 3 licences: two 10G licenses and one 1G license.
Note
If you are a Managed Security Services Provider (MSCS), we also offer a usage-based pricing model to only pay for the data analysed by the network probes. Contact your Sales representative for more information or contact us at sales@stamus-networks.com.
Stamus Licenses Comparison¶
This following table illustrates the difference between Stamus ND and Stamus NDR.
Capability |
Stamus ND |
Stamus NDR |
Description |
---|---|---|---|
Rules-based Detection |
Yes |
Yes |
Detect threats using signatures, from third-party providers (free or paid) or create your own |
Threat Intelligence (Reputation list) Detection |
Yes |
Yes |
Use IP/Domain/etc reputation lists from third-party providers to detect threats |
Complete Network Capture |
Yes |
Yes |
Captures NSM data, Flows, IDS alerts, PCAP, and files with a single engine optimized for performance |
Enrichement |
Yes |
Yes |
Events are enriched with contextual information such as Network Definitions |
Tagging |
Yes |
Yes |
Create Filters & Policies to automatically tag alerts as Relevant or Informational (for historic and future events) |
Guided Threat Hunting |
Yes |
Yes |
Benefits from pre-defined Filter Sets by Stamus Threat Reasearch Team to start hunting right away and easy pivoting |
REST-API |
Yes |
Yes |
Access all the system’s configuration and data via REST API for integration with other systems and customized remote management |
Declaration of Compromise ™ |
No |
Yes |
Additional layer of detection analytics that identifies a sequence of threats against an asset, and only alerts on serious and imminent threats |
Beacon Detection (ML) |
No |
Yes |
Detect beacons using machine learning and algorithmic detection |
Sighting Detection |
No |
Yes |
Detect anomalous and suspicious activity using machine learning and algorithmic detection |
Assets Insights |
No |
Yes |
An asset-centric view of a threat’s progression along the Cyber Kill Chain. Identifies all host-related activity on your network and tracks it over time. |
Custom Declaration of Compromise ™ |
No |
Yes |
Escalate your own detections to Declaration of Comprise |
Webhook Notifications |
No |
Yes |
Webhook mechanism allows push data to others systems such as a Ticketing system, a SOAR, a SIEM, a Messaging app, etc |
Proofpoint ETPro Subscription |
No |
Yes |
Bundled subscription to the world’s best signatures provider, Proofpoint ETPro ruleset (updated daily). |
Note
In a nutshell, the Stamus ND will get you “a better IDS” while the Stamus NDR will unlock all the features of Stamus Central Server for a complete Network Detection & Response solution that allows gradually growing to advanced analytics, automated responses and much more.
See also
Alternatively, we may also want to give a try to our Open Source solution SELKS.
Sales Trial License¶
A Sales Trial license is for preparing a pilot project or a proof of concept prior a deployment. Ask your sales representative if you already are a customer or contact us by email at sales@stamus-networks.com.
The Sales Trial license is:
Free
Limited to 30 days (may be extended under some circumstances)
Has no technical limitations except the hardware (or VM) you choose (we can also provide Appliances depending on your bandwidth requirements)
Installing a license¶
Installing a license is a two steps process:
Send to your Sales representative your Unique ID
Receive back the generated license for your system.
Generate your SCS Unique ID¶
To generate your SCS Unique ID, follow those steps:
Log in to Stamus Central Server
Go under Probe Management
Click on the Stamus Networks logo in the upper left to pull down the System menu
Click “System license” from the menu
In the left side Action menu, click on “Get Unique SCS ID”
Download the file and email it to support@stamus-networks.com
Once received, our Stamus Software Support team will send you back your license file.
Install the license¶
Once you have received your license file, first place the license file to a location that it can be uploaded to Stamus Central Server. It can be your computer’s Desktop or any other workstations (especially in closed environments).
Then, install it using the following steps:
Log in to Stamus Central Server
Go under Probe Management
Click on the Stamus Networks logo in the upper left to pull down the System menu
Click “System license” from the menu
Click the “Choose File” button and choose the license file you downloaded
Click “Upload” to upload the new License
You are all set ! The page should refresh with the appropriate expiration date.