Arctic Wolf Appliances

Updated Sep 19, 2023

Sensor Deployment Guides

The Arctic Wolf® Sensor is an external network device that allows you to monitor network traffic. Arctic Wolf Managed Detection and Response (MDR) uses one or more sensor deployments to monitor events in your network and identify potential threats.

You can deploy the sensor in an internal tap or a port mirroring configuration.

When the sensor is deployed as an internal tap, the sensor passively captures all network traffic between the switch and the firewall.
When the sensor is deployed as a port mirror, a switch sends a copy of all network packets that are seen on one port to another port.

Note: Arctic Wolf physical sensors can be included in an active/passive high availability (HA) infrastructure, but the sensors do not provide any HA functionality. You must configure your HA environment to avoid any duplication of sensor data as Arctic Wolf does not de-duplicate data.

To install a physical sensor, see one of these installation guides:

Sensor	Internal Tap Deployment Guide	Mirroring Deployment Guide
AWN101	Internal Tap	Mirroring
AWN201	Internal Tap	Mirroring
AWN201 10G	Internal Tap	Mirroring
AWN202	Internal Tap	Mirroring
AWN202 10G	Internal Tap	Mirroring
AWN203	Not supported	Mirroring
AWN301	Not supported	Mirroring
AWN301 10G	Internal Tap — Legacy	Mirroring
AWN1000	Internal Tap	Mirroring
AWN1000 10G	Internal Tap	Mirroring
AWN1000 40G	Not supported	Mirroring

Sensor Replacement Guides

AWN200 Sensor models reached its End-of-Life (EOL) milestone on November 1, 2021. To replace an AWN200 Sensor deployment in your network, see one of these replacement guides:

Sensor	Image	Internal Tap Replacement Guide	Mirroring Replacement Guide
AWN200 to AWN201		Internal Tap	Mirroring
AWN200 to AWN202		Internal Tap	Mirroring

Scanner Installation Guides

Scanner	Image	Installation Guide
Arctic Wolf 200 series		Installation Guide