SIEM Licensing (Description)

The UserGate SIEM solution is based on the LogAn product. SIEM licensing requires a license with the basic LogAn functions and add-on modules that provide access to SIEM functionality.

LogAn basic functionality is licensed by the number of connected sensors, from which it collects information. A sensor can be a UserGate gateway or any other device that can send information using the SNMP protocol to the SIEM server.

A LogAn license grants the right to use the product forever.

Note When a SIEM module is added to a LogAn license, the administrator is alerted that the server role has changed. The server role will be changed automatically.

The following modules can be additionally licensed:

Name

Description

Security Update (SU) Module

The SU module grants the right to receive LogAn software updates.

The module is licensed as an annual subscription. After one year, you will need to renew the license to continue receiving software updates.

Sensors

This module determines the number of sensors from which LogAn can collect information. The module is licensed as an annual subscription. After one year, you will need to renew to continue the use.

SIEM Functionality Module

This module provides access to the functionality of SIEM and IRP systems: create and configure analytics rules and define response where these rules are triggered.

The module entitles you to use the SIEM functionality indefinitely.

SIEM Expertise Subscription Module

An add-on module to the SIEM Functionality licensing module. This module entitles you to obtain UserGate expertise:

  • Update of the library of analytics rules;

  • Update of the library of UserGate remote device management commands.

The module is licensed as an annual subscription. When the license expires, the libraries you have downloaded while the license was valid remain operational, but they cannot be updated any more: you will need to renew your license to receive updates.

To register the product, follow these steps:

Name

Description

Step 1. Go to the Dashboard.

Click the Dashboard icon in the top right corner.

Step 2. Register the product in the License section.

In the License section, click No license, enter the PIN code, and complete the registration form.

If a UserGate node is in a closed loop without direct access to the Internet, it is possible to activate/update the license through a proxy server. To do this, select Use a proxy server for activation and updates. Then specify the IP address and port of the upstream proxy server. If necessary, specify the login and password for authentication on the proxy server.

You can view the status of the installed license in the License widget of the Dashboard.