Related Topics
TDR Licensing
Threat Detection and Response is a subscription service for your Firebox. It is included in the Total Security Suite subscription.
Your TDR subscription enables you to configure the Threat Detection and Response feature on one Firebox, and also includes a set of Host Sensor licenses that enable you to install Host Sensors on your network. The number of included Host Sensor licenses depends on the Firebox model. You can purchase additional Host Sensor licenses, if you have at least one Firebox in your account with an active Threat Detection and Response subscription.
The Threat Detection and Response subscription license has two components:
Firebox feature key
When the Threat Detection and Response feature is enabled in your Firebox feature key, you can configure the Firebox to send network security events to your Threat Detection and Response account. The feature key has an expiration date for this subscription service. When you activate or renew your subscription, make sure to update the feature key on the Firebox so that it continues to report security events on your network.
For information about how to activate a Firebox subscription service or renewal, see Get a Firebox Feature Key.
Host Sensor licenses
Your Threat Detection and Response subscription also includes Host Sensor licenses. Host Sensor licenses enable you to install and use the Host Sensor application to monitor activity on hosts on your network. When you activate your security subscription or Host Sensor upgrade license, the Host Sensor licenses are automatically added to your Threat Detection and Response account. Host Sensor licenses have an expiration date. Host Sensor licenses expire when your TDR subscription expires.
Host Sensor License Expiration
When the Host Sensor license expires:
- The Host Sensors that were installed first expire first.
- The Install State for an expired Host Sensor is Expired.
- Expired Host Sensors cannot take action on an endpoint.
- Expired Host Sensors continue to report threats for a 7 day grace period after the license expiration date.
- Expired Host Sensors are automatically uninstalled at the end of the 7 day grace period.
If your TDR account does not have an unexpired Host Sensor license, you cannot download a new Host Sensor or select the Install Sensor action.
When you add Host Sensor licenses to your account, the new licenses automatically apply to installed Host Sensors.
Get a TDR License
Threat Detection and Response is supported for Firebox and XTMv models only. To get a TDR license for your Firebox and Host Sensors:
- If your Firebox had a Total Security Suite subscription activated prior to the release of Fireware v11.12, update the feature key on the Firebox to add TDR capability to your Firebox.
- If you activate a Threat Detection and Response subscription, update the feature key on the Firebox to add TDR capability to your Firebox.
Manage Host Sensor Licenses
When you activate your Threat Detection and Response subscription, the Host Sensor licenses are automatically added to your Threat Detection and Response account. To see your active Host Sensor licenses, log in to your Threat Detection and Response account as a user with Administrator credentials.
If you are a WatchGuard Partner, your TDR account is a Service Provider account. To assign Host Sensors licenses to accounts you manage, you must log in to your Threat Detection and Response account as a user with Administrator (SP) credentials.
For more information, see Manage TDR Host Sensor Licenses