Configuring traffic redirection from the Endpoint Sensors components to the Sensor component

You can use the server hosting the Sensor component as a proxy server during data exchange between the Endpoint Sensors components and the Central Node component to decrease the burden on the Central Node component.

When configuring the traffic redirection, keep in mind the following limitations:

• The maximum incoming traffic volume for the Sensor component should not exceed 1 Gbit/s.
• The maximum number of computers with the Endpoint Sensors component should be 1,000.
• The recommended channel capacity between servers hosting the Central Node and Sensor components should be 15% of the SPAN port traffic.
• The maximum allowed packet loss between servers hosting the Sensor and Central Node components should be 10% with a packet delay up to 100 ms.

Perform the necessary actions to strengthen the security of the SSL connection of the server hosting the Sensor component with the Central Node server similarly to the actions for the Endpoint Sensors component and the Central Node component in the following sequence:

1. You can use a certificate that was automatically created during the program installation process, a certificate that was manually created on the server with the Sensor component, or a certificate that was independently created and uploaded to the server with the Sensor component.
2. Prepare an SSL certificate and upload it to Active Directory.

You can only use the Sensor component as a proxy server if the Sensor and Central Node components are located on different servers.

If you use the Sensor component as a proxy server, make sure that while configuring the Endpoint Sensors component settings, you entered IP address of the Endpoint Sensors component instead of the Central Node IP address.

In this Help section Enabling and disabling traffic redirection from the Endpoint Sensors components Authorizing the Sensor component on a server with the Central Node component

Page top