How are devices counted?
A device is a host running the NetSenX agent. One agent on a SPANSPAN: switch port analyser. A switch setting that sends a copy of network traffic to one port, where a sensor can watch it. or TAPTAP: test access point. A small device that copies the traffic on a network cable for a sensor to watch. port monitors a whole network segment and counts as one device.
This answer also appears, with more context, here: NDR for small business
Read next
Related questions
- Is a free open-source security stack enough for a small company?
- How much effort does it take to run a self-hosted open-source monitoring stack?
- Do we need both host-based and network-based intrusion detection?
- What is detection-as-code, and does a small company need it?
- Can a team without security specialists run NDR?
Terms used here
- SPAN (switch port analyser)
- A switch setting that sends a copy of network traffic to one port, where a sensor can watch it.
- TAP (test access point)
- A small device that copies the traffic on a network cable for a sensor to watch.