Overview

1/1

WitFoo Precinct 7.x software package for MSSP

Highlights

Big Data Security Operations Platform

Details

Sold by

WitFoo

Pricing

WitFoo Precinct Streamer for MSSP

Info

View purchase options

Pricing and entitlements for this product are managed outside of AWS Marketplace through an external billing relationship between you and the vendor. You activate the product by supplying an existing license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. Subscriptions have no end date and may be cancelled any time. However, the cancellation won't affect the status of an active license if it was purchased outside of AWS Marketplace.

Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.

Additional AWS infrastructure costs

Type	Cost
EBS General Purpose SSD (gp3) volumes	$0.08/per GB/month of provisioned storage

Vendor refund policy

15-day trial is free; No refunds after purchase

Legal

Vendor terms and conditions

Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

Content disclaimer

Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

Usage information

Info

Delivery details

64-bit (x86) Amazon Machine Image (AMI)

Amazon Machine Image (AMI)

An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

Version release notes

https://community.witfoo.com/release-notes-6-2-0/

Additional details

Usage instructions

Deploy AMI - Configure Security group to allow access as follows Outbound: 9042/tcp and 5432/tcp to data.witfoocloud.com (over TLS 1.3) 443/tcp to library.witfoo.com, registry.witfoo.com (over TLS 1.3) Access to enabled API integrations (normally 443/tcp)

Inbound: 514/tcp/udp - syslog 6514/tcp - syslog over TLS 2055/udp - netflow 5044/tcp - Beats agents (over TLS)

Once the appliance is launched run through these steps:

SSH or terminal into the deployed Streamer node. For OVA and VHD deployments, the user is witfooadmin and password is F00theN0ise! The Cloud Marketplaces use SSH keys that are configured at launch.
Ensure the appliance has the correct/preferred IP address by running ifconfg
VERY IMPORTANT:: To discover what the Streamers Public/Routable IP Address is run curl https://ipinfo.io/ip . This is the IP address that will be used to send data to WitFoo Precinct Cloud. Make a note of the address so you can enter it in the next step.
Go to https://ach.witfoocloud.com and log back in.
Under Admin -> Settings edit "Allowed IP addresses to send data or connect to the Cassandra cluster" to include the Internet routable (public IP) address(es) to include the addresses the Streamer node will use to connect to *.witfoocloud.com.
Scroll to the bottom of the settings page and hit the "Submit" button
On the streamer node: Execute sudo bash
Execute ./register
When asked if you have a license key, type Y then hit enter. Use the key that was assigned to your Precinct deployment. Select 3 to make the node a Streamer node.

Resources

Vendor resources

WitFoo Community

Product Pricing

Support

Vendor support

https://community.witfoo.com/ Email, Phone, Community, In-person

AWS infrastructure support

AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

Get support