Arctic Wolf AppliancesUpdated Sep 19, 2023
The Arctic Wolf® Sensor is an external network device that allows you to monitor network traffic. Arctic Wolf Managed Detection and Response (MDR) uses one or more sensor deployments to monitor events in your network and identify potential threats.
You can deploy the sensor in an internal tap or a port mirroring configuration.
When the sensor is deployed as an internal tap, the sensor passively captures all network traffic between the switch and the firewall.
When the sensor is deployed as a port mirror, a switch sends a copy of all network packets that are seen on one port to another port.
Note: Arctic Wolf physical sensors can be included in an active/passive high availability (HA) infrastructure, but the sensors do not provide any HA functionality. You must configure your HA environment to avoid any duplication of sensor data as Arctic Wolf does not de-duplicate data.
To install a physical sensor, see one of these installation guides:
|Sensor||Image||Internal Tap Deployment Guide||Mirroring Deployment Guide|
|AWN201 10G||Internal Tap||Mirroring|
|AWN202 10G||Internal Tap||Mirroring|
|AWN301 10G||Internal Tap — Legacy||Mirroring|
|AWN1000 10G||Internal Tap||Mirroring|
|AWN1000 40G||Not supported||Mirroring|
AWN200 Sensor models reached its End-of-Life (EOL) milestone on November 1, 2021. To replace an AWN200 Sensor deployment in your network, see one of these replacement guides:
|Sensor||Image||Internal Tap Replacement Guide||Mirroring Replacement Guide|
|AWN200 to AWN201||
|AWN200 to AWN202||
|Arctic Wolf 200 series||Installation Guide|