Overview
WitFoo Precinct 7.x software package for MSSP
Highlights
- Big Data Security Operations Platform
Details
Features and programs
Financing for AWS Marketplace purchases
Pricing
Additional AWS infrastructure costs
Type | Cost |
|---|---|
EBS General Purpose SSD (gp3) volumes | $0.08/per GB/month of provisioned storage |
Vendor refund policy
15-day trial is free; No refunds after purchase
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
Deploy AMI - Configure Security group to allow access as follows Outbound: 9042/tcp and 5432/tcp to data.witfoocloud.com (over TLS 1.3) 443/tcp to library.witfoo.com, registry.witfoo.com (over TLS 1.3) Access to enabled API integrations (normally 443/tcp)
Inbound: 514/tcp/udp - syslog 6514/tcp - syslog over TLS 2055/udp - netflow 5044/tcp - Beats agents (over TLS)
Once the appliance is launched run through these steps:
- SSH or terminal into the deployed Streamer node. For OVA and VHD deployments, the user is witfooadmin and password is F00theN0ise! The Cloud Marketplaces use SSH keys that are configured at launch.
- Ensure the appliance has the correct/preferred IP address by running ifconfg
- VERY IMPORTANT:: To discover what the Streamers Public/Routable IP Address is run curl https://ipinfo.io/ip . This is the IP address that will be used to send data to WitFoo Precinct Cloud. Make a note of the address so you can enter it in the next step.
- Go to https://ach.witfoocloud.com and log back in.
- Under Admin -> Settings edit "Allowed IP addresses to send data or connect to the Cassandra cluster" to include the Internet routable (public IP) address(es) to include the addresses the Streamer node will use to connect to *.witfoocloud.com.
- Scroll to the bottom of the settings page and hit the "Submit" button
- On the streamer node: Execute sudo bash
- Execute ./register
- When asked if you have a license key, type Y then hit enter. Use the key that was assigned to your Precinct deployment. Select 3 to make the node a Streamer node.
Resources
Vendor resources
Support
Vendor support
https://community.witfoo.com/ Email, Phone, Community, In-person
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
