Highlighted
Established Member..
Established Member..
442 views

Arcsight Device Licenses: Type 1 & Type 2

Hello guys

What is difference between device Type1 & Type 2 mentioned in the ArcSight ESM License?

Ex:

limit.actors=300

limit.assets=10000

limit.console.users=7

limit.devices=400

----> limit.devices.type1=200

----> limit.devices.type2=200

limit.web.users=15

Plus, if a device stopped sending events, how long it takes to be removed from the count of the Device Count License?

Thanks

Regards,

Georges

Labels (1)
Tags (3)
0 Likes
3 Replies
Highlighted
New Member.

I got this from HP a year ago:

Asset Limit: x

Device limit: a+b

Device Limit (Type 1): a (server licenses)

Device Limit (Type 2): b (endpoint/workstation licenses)

Asset may or may not be sending logs to ArcSight , it will be considered a device+asset whens its sending logs,

e.g : you might have few routers or switches in DMZ but all of the may not be sending logs to ArcSight

It’s mainly for tagging of assets to different zone in a network,  Whereas a+b is no of active devices sending logs to ArcSight.

So you can have x assets in your network model , out of which only a+b are allowed to send event logs to ArcSight.

0 Likes
Highlighted
Established Member..
Established Member..

Hello Vijay

Thanks for the answer

1 more clarification, when you say:

Device Limit (Type 1): a (server licenses)

Device Limit (Type 2): b (endpoint/workstation licenses


To which Type does devices like firewall, Switches, Load Balancers are counted for ?

0 Likes
Highlighted
New Member.

I would take those devices to be endpoints. I suggest that you check directly with HPE Support for confirmation.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.