Skip to main content

Physical Sensors

Physical NDR sensors are designed for plug-and-play functionality straight out of the box. They simply need to be connected to your network via the management port and assigned an IP address by your DHCP server. Once the sensor establishes an internet connection, it begins to inspect traffic through the data ports and sends aggregated security events to our SaaS platform.

TD NETWORK TDSP-10​

Ideal for smaller network segments with a limited number of devices. It is a small form-factor (NUC) sensor that is DIN-rail mountable and can be deployed in small enterprise networks, as well as in ICS/OT environments. TD NETWORK TDSP-10 contains the following ports:

  • 1 x Out-of-band port
  • 1 x Management RJ45 port
  • 3 x 1Gbe RJ45 Data ports

TD NETWORK TDSP-1000​

A rack-mountable sensor that can be used in larger deployments. It is a 1 RU that is suited to process large volumes of data in real-time. TD NETWORK TDSP-1000 contains the following ports:

  • 1 x Out-of-band port
  • 1 x Management port
  • 7 x 1Gbe RJ45 Data ports
  • 4 x SFP Data ports

Installation Instructions​

  1. Physical Setup:
  • Place the sensor securely and ensure proper ventilation.
  • Connect the sensor to power and network.
    • Note: The first port (from the left) is designated for management purposes, while the remaining ports are configured for mirroring network traffic.
  1. Integration with ThreatDefence Platform:
  • We ship our sensors pre-configured. The sensor will automatically integrate with the ThreatDefence platform.
  1. Additional Setup:

  • Create a mirror/span port on your switch's inside firewall port and connect it to a free network port.

    • For example, assume your firewall inside NIC is connected to switch port 1/0/1 and the ThreatDefence (TD) sensor mirror on port 1/0/2. On Cisco, the commands to enable port mirroring would be:
Monitor session 12 source interface 1/0/1
Monitor session 12 destination interface 1/0/2
  • Ensure that your ThreatDefence (TD) sensor is able to reach TD servers on port 443 on the following domains:
    • tele.threatdefence.io
    • vle.threatdefence.io
tip

If you require any further assistance, please email support@threatdefence.com.