Physical Arctic Wolf Sensors

An Arctic Wolf Sensor is an external network device that performs passive network inspection and collects security-relevant data for analysis. Arctic Wolf Managed Detection and Response (MDR) uses one or more sensor deployments to monitor events in your network and identify potential threats.

You can deploy a physical sensor in these configurations:

Note:

Arctic Wolf physical sensors can be included in an active/passive high availability (HA) infrastructure, but the sensors do not provide any HA functionality or monitor network traffic. You must configure your HA environment to avoid any duplication of sensor data as Arctic Wolf does not de-duplicate data. HA is supported for log collection only. For more information, see Enable high availability.

To install a physical sensor, see one of these installation guides: