AWN201 10G Sensor Internal Tap Deployment

Deployment Guide

Overview

This guide describes how to deploy the AWN201 10G Sensor with internal tap. This figure shows a simplified network map of an internal tap deployment:

In the box

These items are in the box:

Before you begin

Before you install your sensor:

Note: If your firewall performs SSL/TLS inspection, AllowList the sensor management IP address and verify that your firewall allows outbound access from that IP address over port 443 to the IP addresses listed under If you are a Managed Detection and Response (MDR) customer on the Arctic Wolf IP Addresses page in the Arctic Wolf Portal.

This figure shows the sensor ports used in this installation procedure:

AWN201 10G Sensor

Staging installation

To perform the staging installation:

  1. Rack the sensor in its final location.

  2. Use an ethernet cable to connect the Management Port, port 7, on the sensor to a network switch with an outbound connection.

  3. Plug in and power on the sensor.

    Tip: The Power LED turns green when the sensor is on.

  4. Ping the management IP address that you provided to Arctic Wolf to verify network connectivity.

  5. Email security@arcticwolf.com if you cannot perform steps 3 and 4 successfully.

Production installation

To configure the AWN201 sensor with internal tap:

  1. Use one of the LC-LC multi-mode fiber cables to connect the wan0 bridge port on the sensor to the inside interface of your firewall, and use the other one of these cables to connect the lan0 bridge port on the sensor to your switch.

  2. (Optional) Connect additional firewall or switch links to the 1G bridge ports on the sensor.

  3. Wait one minute, and then verify that network connectivity for network devices is unaffected.

    Note: If network connectivity is affected, disconnect the sensor from the network and email security@arcticwolf.com to schedule a troubleshooting session.

  4. Contact security@arcticwolf.com to confirm that Arctic Wolf is seeing your network traffic.