CINXE.COM

Step 1: Network Sensor Location Guidelines | Insight Network Sensor Documentation

<!DOCTYPE html> <!-- Q6E1 --> <html class="no-js" lang="en" dir="ltr"> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8" charset="utf-8" /> <meta http-equiv="x-ua-compatible" content="ie=edge" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>Step 1: Network Sensor Location Guidelines | Insight Network Sensor Documentation</title> <meta name="description" content="Learn best practices for locating your Insight Network Sensor." /> <meta name="google-site-verification" content="OWb2G7FKmbGyIQgzPz7zSAy6HYcWHDqEJcd0eyA0GwQ" /> <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Mulish:wght@800;900&family=Roboto:wght@400;700&display=swap"> <link rel="icon" type="image/x-icon" href="/includes/img/favicon.ico"> <script> window.dataLayer = window.dataLayer || []; window.dataLayer.push({ 'auth': false }); </script> <!-- Google Tag Manager --> <script> (function (w, d, s, l, i) { w[l] = w[l] || []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }); var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f); })(window, document, 'script', 'dataLayer', 'GTM-WBTPTVC');</script> <!-- End Google Tag Manager --> <link href="/areas/docs/includes/dist/app.css?91b95aada2e8e5c1bfd9" rel="stylesheet"> <meta name="facetcat" content="docs" /> <link href="https://fonts.googleapis.com/css2?family=Roboto+Mono&display=swap" rel="stylesheet" /> <meta name="productname" content="Insight Network Sensor" /> </head> <body> <div id="r7-global-nav"> <div id="react_0HNALVPQ3J4R0"><header class="r7-nav mobile show-main--init r7-nav--wide"><section class="search-bar search-bar--mobile hide animate-out"><form action="/search"><div class="container flex flex-jc-c flex-ai-c"><div class="search-content flex flex-jc-fs flex-ai-c"><i class="r7-icon r7-icon-search-magnify"></i><input type="search" class="search-input" name="q" placeholder="Search"/><input type="submit" class="search-submit button blue" value="Search"/><input type="hidden" name="filters" value="productname_Insight Network Sensor"/><a id="btnSearchCloseMobile" class="search-close"><i class="r7-icon r7-icon-delete-x"></i></a></div></div></form></section><div class="search-overlay search-overlay--mobile overlay "></div><nav class="main-nav "><div class="container flex flex-jc-sb flex-ai-c"><div class="flex flex-jc-c flex-ai-c"><a class="main-nav__toggle"><i class="r7-icon text-white"></i></a></div><a class="main-nav__logo flex flex-jc-c flex-ai-c text-center" href="https://www.rapid7.com/" target="_blank"><img src="/Areas/Docs/includes/img/r7-nav/Rapid7_logo.svg" alt="Rapid7 Home"/></a><a class="search flex flex-jc-c flex-ai-c"><i class="r7-icon r7-icon-search-magnify text-white"></i></a></div><div class="main-nav__links flex flex-jc-c"><ul><li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="" aria-role="button" aria-haspopup="dialog" aria-controls="b8a00c37-bcb5-4dce-8f44-12a67be58b3c">Platform</a><div id="b8a00c37-bcb5-4dce-8f44-12a67be58b3c" class="dropdown-content two-col" role="dialog" aria-labelledby="Platform"><div class="dropdown-view-all"><ul class="dropdown-footer"><li class="dropdown-item"><div class="dropdown-text column-pad"><div class="dropdown-footer-pretitle">TECHNOLOGY</div><div class="dropdown-footer-title">The Rapid7 Command Platform</div><div class="dropdown-footer-subtitle">AI-Powered Cybersecurity Platform</div></div><div class="dropdown-button column-pad"><a href="https://www.rapid7.com/platform/" class="button" aria-role="button">Explore</a></div></li></ul></div><ul class="dropdown-menu"><li class="dropdown-title">PLATFORM</li><li class="dropdown-item"><a href="https://www.rapid7.com/platform/"><div class="dropdown-text">Platform<div class="dropdown-category">ELITE TECHNOLOGY</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/platform/artificial-intelligence-features/"><div class="dropdown-text">AI-Engine<div class="dropdown-category">INTELLIGENT TOOLS</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/research/"><div class="dropdown-text">Rapid7 Labs<div class="dropdown-category">TRUSTED INTELLIGENCE</div></div></a></li></ul><ul class="dropdown-menu"><li class="dropdown-title">SOLUTIONS</li><li class="dropdown-item"><a href="https://www.rapid7.com/services/managed-detection-and-response-mdr/"><div class="dropdown-text">Managed Threat Complete<div class="dropdown-category">MANAGED XDR</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/command/attack-surface-management-asm/"><div class="dropdown-text">Surface Command<div class="dropdown-category">ATTACK SURFACE MANAGEMENT</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/command/exposure-management/"><div class="dropdown-text">Exposure Command<div class="dropdown-category">EXPOSURE MANAGEMENT</div></div></a></li></ul></div></li><li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/products/" aria-role="button" aria-haspopup="dialog" aria-controls="a8576a87-8871-4fe8-91b9-8a74c27561a0">Products</a><div id="a8576a87-8871-4fe8-91b9-8a74c27561a0" class="dropdown-content two-col" role="dialog" aria-labelledby="Products"><div class="dropdown-view-all"><ul class="dropdown-footer"><li class="dropdown-item"><div class="dropdown-text column-pad"><div class="dropdown-footer-pretitle">NEW!</div><div class="dropdown-footer-title">Exposure Command</div><div class="dropdown-footer-subtitle">Take Command of Your Attack Surface</div></div><div class="dropdown-button column-pad"><a href="https://www.rapid7.com/products/command/request-demo/" class="button" aria-role="button">Request Demo</a></div></li></ul></div><ul class="dropdown-menu"><li class="dropdown-title">DETECTION &amp; RESPONSE</li><li class="dropdown-item"><a href="https://www.rapid7.com/products/insightidr/"><div class="dropdown-text">Next-Gen SIEM<div class="dropdown-category">INSIGHTIDR</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/threat-command/"><div class="dropdown-text">Threat Intelligence<div class="dropdown-category">THREAT COMMAND</div></div></a></li></ul><ul class="dropdown-menu"><li class="dropdown-title">EXPOSURE MANAGEMENT</li><li class="dropdown-item"><a href="https://www.rapid7.com/products/command/exposure-management/"><div class="dropdown-text">Exposure Management<div class="dropdown-category">EXPOSURE COMMAND</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/command/attack-surface-management-asm/"><div class="dropdown-text">Attack Surface Management<div class="dropdown-category">SURFACE COMMAND</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/insightvm/"><div class="dropdown-text">Vulnerability Management<div class="dropdown-category">INSIGHTVM</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/insightcloudsec/"><div class="dropdown-text">Cloud-Native Application Protection<div class="dropdown-category">INSIGHTCLOUDSEC</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/insightappsec/"><div class="dropdown-text">Application Security Testing<div class="dropdown-category">INSIGHTAPPSEC</div></div></a></li></ul></div></li><li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/services/" aria-role="button" aria-haspopup="dialog" aria-controls="9112363a-a38f-45ed-b175-8a589dd3615b">Services</a><div id="9112363a-a38f-45ed-b175-8a589dd3615b" class="dropdown-content two-col" role="dialog" aria-labelledby="Services"><div class="dropdown-view-all"><ul class="dropdown-footer"><li class="dropdown-item"><div class="dropdown-text column-pad"><div class="dropdown-footer-pretitle">MXDR</div><div class="dropdown-footer-title">Managed Threat Complete</div><div class="dropdown-footer-subtitle">24x7 MXDR to secure your extended ecosystem</div></div><div class="dropdown-button column-pad"><a href="https://www.rapid7.com/services/managed-detection-and-response-mdr/demo/" class="button" aria-role="button">Request Demo</a></div></li></ul></div><ul class="dropdown-menu"><li class="dropdown-title">DETECTION &amp; RESPONSE</li><li class="dropdown-item"><a href="https://www.rapid7.com/services/managed-detection-and-response-mdr/"><div class="dropdown-text">Managed XDR<div class="dropdown-category">MANAGED THREAT COMPLETE</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/services/incident-response-customer-escalation/"><div class="dropdown-text">Incident Response Services<div class="dropdown-category">EXPERIENCING A BREACH?</div></div></a></li></ul><ul class="dropdown-menu"><li class="dropdown-title">EXPOSURE MANAGEMENT</li><li class="dropdown-item"><a href="https://www.rapid7.com/services/managed-services/vulnerability-management/"><div class="dropdown-text">Managed Vulnerability Management<div class="dropdown-category">OPTIMIZED RISK ASSESSMENT</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/services/managed-services/managed-appsec/"><div class="dropdown-text">Managed Application Security<div class="dropdown-category">MANAGED DAST</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/services/continuous-red-team-service/"><div class="dropdown-text">Continuous Red Teaming<div class="dropdown-category">VECTOR COMMAND</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/services/security-consulting/penetration-testing-services/"><div class="dropdown-text">Penetration Testing Services<div class="dropdown-category">TEST YOUR DEFENSES</div></div></a></li></ul></div></li><li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="" aria-role="button" aria-haspopup="dialog" aria-controls="953b8b00-e5c8-44aa-b1b8-1f2bf18beed2">Resources</a><div id="953b8b00-e5c8-44aa-b1b8-1f2bf18beed2" class="dropdown-content two-col" role="dialog" aria-labelledby="Resources"><div class="dropdown-view-all"><ul class="dropdown-footer"><li class="dropdown-item"><div class="dropdown-text column-pad"><div class="dropdown-footer-pretitle">NEW</div><div class="dropdown-footer-title">The Take Command Summit is back!</div><div class="dropdown-footer-subtitle">Our largest virtual event returns Apr. 9</div></div><div class="dropdown-button column-pad"><a href="https://rapid7.brighttalk.com/?utm_source=referral&amp;utm_medium=website&amp;utm_campaign=global-pla-take-command-summit-prospect-eng" class="button" aria-role="button">Register</a></div></li></ul></div><ul class="dropdown-menu"><li class="dropdown-title">STAY CURRENT</li><li class="dropdown-item"><a href="https://www.rapid7.com/research/"><div class="dropdown-text">About Rapid7 Labs<div class="dropdown-category">MEET THE RESEARCH TEAM</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/events-webcasts/"><div class="dropdown-text">Events &amp; Webinars<div class="dropdown-category">CATCH US LIVE</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/resources/"><div class="dropdown-text">Resources Library<div class="dropdown-category">DIVE INTO THE DETAILS</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/blog/"><div class="dropdown-text">The Rapid7 Blog<div class="dropdown-category">STAY UP-TO-DATE</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/db/"><div class="dropdown-text">Exploit Database<div class="dropdown-category">SEARCH THOUSANDS OF CVES</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/fundamentals/"><div class="dropdown-text">Cybersecurity Fundamentals<div class="dropdown-category">LEARN THE BASICS</div></div></a></li></ul><ul class="dropdown-menu"><li class="dropdown-title">PRODUCT SUPPORT</li><li class="dropdown-item"><a href="https://www.rapid7.com/contact/"><div class="dropdown-text">Contact Sales<div class="dropdown-category">TALK TO AN EXPERT</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/for-customers/"><div class="dropdown-text">Customer Support Portal<div class="dropdown-category">CONTACT SUPPORT</div></div></a></li><li class="dropdown-item"><a href="https://extensions.rapid7.com/"><div class="dropdown-text">Product Integrations<div class="dropdown-category">CONNECT EVERYTHING</div></div></a></li><li class="dropdown-item"><a href="/"><div class="dropdown-text">Product Documentation<div class="dropdown-category">PRODUCT AND SERVICES GUIDES</div></div></a></li><li class="dropdown-item"><a href="/release-notes/"><div class="dropdown-text">Product Release Notes<div class="dropdown-category">LATEST FEATURES</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/product-tours/"><div class="dropdown-text">Interactive Product Tours<div class="dropdown-category">TAKE TOUR</div></div></a></li></ul></div></li><li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/about/company/" aria-role="button" aria-haspopup="dialog" aria-controls="8ccc37d9-abd1-4395-b26e-b41799f165c2">Company</a><div id="8ccc37d9-abd1-4395-b26e-b41799f165c2" class="dropdown-content two-col" role="dialog" aria-labelledby="Company"><ul class="dropdown-menu"><li class="dropdown-title">OVERVIEW</li><li class="dropdown-item"><a href="https://www.rapid7.com/about/company/"><div class="dropdown-text">About Us<div class="dropdown-category">OUR STORY</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/leadership/"><div class="dropdown-text">Leadership<div class="dropdown-category">EXECUTIVE TEAM &amp; BOARD</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/news/"><div class="dropdown-text">News &amp; Press Releases<div class="dropdown-category">THE LATEST FROM OUR NEWSROOM</div></div></a></li><li class="dropdown-item"><a href="https://careers.rapid7.com/"><div class="dropdown-text">Careers<div class="dropdown-category">JOIN RAPID7</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/customers/"><div class="dropdown-text">Our Customers<div class="dropdown-category">Their Success Stories</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/partners/"><div class="dropdown-text">Partners<div class="dropdown-category">Rapid7 Partner Ecosystem</div></div></a></li><li class="dropdown-item"><a href="https://investors.rapid7.com/"><div class="dropdown-text">Investors<div class="dropdown-category">Investor Relations</div></div></a></li></ul><ul class="dropdown-menu"><li class="dropdown-title">COMMUNITY &amp; CULTURE</li><li class="dropdown-item"><a href="https://www.rapid7.com/about/social-good/"><div class="dropdown-text">Social Good<div class="dropdown-category">OUR COMMITMENT &amp; APPROACH</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/rapid7-foundation/"><div class="dropdown-text">Rapid7 Cybersecurity Foundation<div class="dropdown-category">BUILDING THE FUTURE</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/diversity-equity-and-inclusion/"><div class="dropdown-text">Diversity, Equity &amp; Inclusion<div class="dropdown-category">EMPOWERING PEOPLE</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/open-source/"><div class="dropdown-text">Open Source<div class="dropdown-category">STRENGTHENING CYBERSECURITY</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/public-policy/"><div class="dropdown-text">Public Policy<div class="dropdown-category">ENGAGEMENT &amp; ADVOCACY</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/rapid7-cybersecurity-partner-boston-bruins/"><div class="dropdown-text">Boston Bruins<div class="dropdown-category">Our Partnership</div></div></a></li></ul></div></li><li class="main-nav__link "><a class="" href="https://www.rapid7.com/partners/" aria-role="button" aria-haspopup="" aria-controls="73ee715d-74a1-44bd-b532-8a9aa89bbb3d">Partners</a></li><li class="main-nav__link"><a href="https://insight.rapid7.com/saml/SSO" class="has-icon"><img src="/Areas/Docs/includes/img/r7-nav/icon-lock.svg" alt=""/>聽<!-- -->Sign In</a></li></ul></div></nav><nav class="sub-nav container flex flex-ai-c"><div class="sub-nav__title"><a href="/" title="Documentation">Documentation</a></div><ul><li class="sub-nav__link dropdown "><a class="dropdown-trigger has-toggle">Insight Network Sensor</a><div class="dropdown-content"><ul class="dropdown-menu"><li class="dropdown-item"><a href="/appspider/">AppSpider</a></li><li class="dropdown-item"><a href="/insight-agent/">Insight Agent</a></li><li class="dropdown-item"><a href="/insightappsec/">InsightAppSec</a></li><li class="dropdown-item"><a href="/insightcloudsec/">InsightCloudSec</a></li><li class="dropdown-item"><a href="/insightconnect/">InsightConnect</a></li><li class="dropdown-item"><a href="/insight/">Insight Platform</a></li><li class="dropdown-item"><a href="/insightidr/">InsightIDR</a></li><li class="dropdown-item"><a href="/sensor/">Insight Network Sensor</a></li><li class="dropdown-item"><a href="/insightops/">InsightOps</a></li><li class="dropdown-item"><a href="/insightvm/">InsightVM</a></li><li class="dropdown-item"><a href="/metasploit/">Metasploit</a></li><li class="dropdown-item"><a href="/nexpose/">Nexpose</a></li><li class="dropdown-item"><a href="/tcell/">tCell</a></li><li class="dropdown-item"><a href="/services/">Managed Services</a></li><li class="dropdown-item"><a href="/threat-command/">Threat Command</a></li><li class="dropdown-item"><a href="/surface-command/">Surface Command</a></li><li class="dropdown-item"><a href="/exposure-command/">Exposure Command</a></li></ul></div></li></ul></nav></header><div class="dropdown-overlay overlay false"></div><header class="r7-nav stuck show-main--init r7-nav--wide"><nav class="main-nav"><div class="container flex flex-jc-sb flex-ai-c"><div class="main-nav__logo"><a class="flex" href="https://www.rapid7.com/" target="_blank"><img src="/Areas/Docs/includes/img/r7-nav/Rapid7_logo.svg" alt="Rapid7 Home"/></a></div><div class="main-nav__links flex flex-jc-c"><ul><li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="" aria-role="button" aria-haspopup="dialog" aria-controls="b8a00c37-bcb5-4dce-8f44-12a67be58b3c">Platform</a><div id="b8a00c37-bcb5-4dce-8f44-12a67be58b3c" class="dropdown-content two-col" role="dialog" aria-labelledby="Platform"><div class="dropdown-view-all"><ul class="dropdown-footer"><li class="dropdown-item"><div class="dropdown-text column-pad"><div class="dropdown-footer-pretitle">TECHNOLOGY</div><div class="dropdown-footer-title">The Rapid7 Command Platform</div><div class="dropdown-footer-subtitle">AI-Powered Cybersecurity Platform</div></div><div class="dropdown-button column-pad"><a href="https://www.rapid7.com/platform/" class="button" aria-role="button">Explore</a></div></li></ul></div><ul class="dropdown-menu"><li class="dropdown-title">PLATFORM</li><li class="dropdown-item"><a href="https://www.rapid7.com/platform/"><div class="dropdown-text">Platform<div class="dropdown-category">ELITE TECHNOLOGY</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/platform/artificial-intelligence-features/"><div class="dropdown-text">AI-Engine<div class="dropdown-category">INTELLIGENT TOOLS</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/research/"><div class="dropdown-text">Rapid7 Labs<div class="dropdown-category">TRUSTED INTELLIGENCE</div></div></a></li></ul><ul class="dropdown-menu"><li class="dropdown-title">SOLUTIONS</li><li class="dropdown-item"><a href="https://www.rapid7.com/services/managed-detection-and-response-mdr/"><div class="dropdown-text">Managed Threat Complete<div class="dropdown-category">MANAGED XDR</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/command/attack-surface-management-asm/"><div class="dropdown-text">Surface Command<div class="dropdown-category">ATTACK SURFACE MANAGEMENT</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/command/exposure-management/"><div class="dropdown-text">Exposure Command<div class="dropdown-category">EXPOSURE MANAGEMENT</div></div></a></li></ul></div></li><li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/products/" aria-role="button" aria-haspopup="dialog" aria-controls="a8576a87-8871-4fe8-91b9-8a74c27561a0">Products</a><div id="a8576a87-8871-4fe8-91b9-8a74c27561a0" class="dropdown-content two-col" role="dialog" aria-labelledby="Products"><div class="dropdown-view-all"><ul class="dropdown-footer"><li class="dropdown-item"><div class="dropdown-text column-pad"><div class="dropdown-footer-pretitle">NEW!</div><div class="dropdown-footer-title">Exposure Command</div><div class="dropdown-footer-subtitle">Take Command of Your Attack Surface</div></div><div class="dropdown-button column-pad"><a href="https://www.rapid7.com/products/command/request-demo/" class="button" aria-role="button">Request Demo</a></div></li></ul></div><ul class="dropdown-menu"><li class="dropdown-title">DETECTION &amp; RESPONSE</li><li class="dropdown-item"><a href="https://www.rapid7.com/products/insightidr/"><div class="dropdown-text">Next-Gen SIEM<div class="dropdown-category">INSIGHTIDR</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/threat-command/"><div class="dropdown-text">Threat Intelligence<div class="dropdown-category">THREAT COMMAND</div></div></a></li></ul><ul class="dropdown-menu"><li class="dropdown-title">EXPOSURE MANAGEMENT</li><li class="dropdown-item"><a href="https://www.rapid7.com/products/command/exposure-management/"><div class="dropdown-text">Exposure Management<div class="dropdown-category">EXPOSURE COMMAND</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/command/attack-surface-management-asm/"><div class="dropdown-text">Attack Surface Management<div class="dropdown-category">SURFACE COMMAND</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/insightvm/"><div class="dropdown-text">Vulnerability Management<div class="dropdown-category">INSIGHTVM</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/insightcloudsec/"><div class="dropdown-text">Cloud-Native Application Protection<div class="dropdown-category">INSIGHTCLOUDSEC</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/products/insightappsec/"><div class="dropdown-text">Application Security Testing<div class="dropdown-category">INSIGHTAPPSEC</div></div></a></li></ul></div></li><li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/services/" aria-role="button" aria-haspopup="dialog" aria-controls="9112363a-a38f-45ed-b175-8a589dd3615b">Services</a><div id="9112363a-a38f-45ed-b175-8a589dd3615b" class="dropdown-content two-col" role="dialog" aria-labelledby="Services"><div class="dropdown-view-all"><ul class="dropdown-footer"><li class="dropdown-item"><div class="dropdown-text column-pad"><div class="dropdown-footer-pretitle">MXDR</div><div class="dropdown-footer-title">Managed Threat Complete</div><div class="dropdown-footer-subtitle">24x7 MXDR to secure your extended ecosystem</div></div><div class="dropdown-button column-pad"><a href="https://www.rapid7.com/services/managed-detection-and-response-mdr/demo/" class="button" aria-role="button">Request Demo</a></div></li></ul></div><ul class="dropdown-menu"><li class="dropdown-title">DETECTION &amp; RESPONSE</li><li class="dropdown-item"><a href="https://www.rapid7.com/services/managed-detection-and-response-mdr/"><div class="dropdown-text">Managed XDR<div class="dropdown-category">MANAGED THREAT COMPLETE</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/services/incident-response-customer-escalation/"><div class="dropdown-text">Incident Response Services<div class="dropdown-category">EXPERIENCING A BREACH?</div></div></a></li></ul><ul class="dropdown-menu"><li class="dropdown-title">EXPOSURE MANAGEMENT</li><li class="dropdown-item"><a href="https://www.rapid7.com/services/managed-services/vulnerability-management/"><div class="dropdown-text">Managed Vulnerability Management<div class="dropdown-category">OPTIMIZED RISK ASSESSMENT</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/services/managed-services/managed-appsec/"><div class="dropdown-text">Managed Application Security<div class="dropdown-category">MANAGED DAST</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/services/continuous-red-team-service/"><div class="dropdown-text">Continuous Red Teaming<div class="dropdown-category">VECTOR COMMAND</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/services/security-consulting/penetration-testing-services/"><div class="dropdown-text">Penetration Testing Services<div class="dropdown-category">TEST YOUR DEFENSES</div></div></a></li></ul></div></li><li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="" aria-role="button" aria-haspopup="dialog" aria-controls="953b8b00-e5c8-44aa-b1b8-1f2bf18beed2">Resources</a><div id="953b8b00-e5c8-44aa-b1b8-1f2bf18beed2" class="dropdown-content two-col" role="dialog" aria-labelledby="Resources"><div class="dropdown-view-all"><ul class="dropdown-footer"><li class="dropdown-item"><div class="dropdown-text column-pad"><div class="dropdown-footer-pretitle">NEW</div><div class="dropdown-footer-title">The Take Command Summit is back!</div><div class="dropdown-footer-subtitle">Our largest virtual event returns Apr. 9</div></div><div class="dropdown-button column-pad"><a href="https://rapid7.brighttalk.com/?utm_source=referral&amp;utm_medium=website&amp;utm_campaign=global-pla-take-command-summit-prospect-eng" class="button" aria-role="button">Register</a></div></li></ul></div><ul class="dropdown-menu"><li class="dropdown-title">STAY CURRENT</li><li class="dropdown-item"><a href="https://www.rapid7.com/research/"><div class="dropdown-text">About Rapid7 Labs<div class="dropdown-category">MEET THE RESEARCH TEAM</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/events-webcasts/"><div class="dropdown-text">Events &amp; Webinars<div class="dropdown-category">CATCH US LIVE</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/resources/"><div class="dropdown-text">Resources Library<div class="dropdown-category">DIVE INTO THE DETAILS</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/blog/"><div class="dropdown-text">The Rapid7 Blog<div class="dropdown-category">STAY UP-TO-DATE</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/db/"><div class="dropdown-text">Exploit Database<div class="dropdown-category">SEARCH THOUSANDS OF CVES</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/fundamentals/"><div class="dropdown-text">Cybersecurity Fundamentals<div class="dropdown-category">LEARN THE BASICS</div></div></a></li></ul><ul class="dropdown-menu"><li class="dropdown-title">PRODUCT SUPPORT</li><li class="dropdown-item"><a href="https://www.rapid7.com/contact/"><div class="dropdown-text">Contact Sales<div class="dropdown-category">TALK TO AN EXPERT</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/for-customers/"><div class="dropdown-text">Customer Support Portal<div class="dropdown-category">CONTACT SUPPORT</div></div></a></li><li class="dropdown-item"><a href="https://extensions.rapid7.com/"><div class="dropdown-text">Product Integrations<div class="dropdown-category">CONNECT EVERYTHING</div></div></a></li><li class="dropdown-item"><a href="/"><div class="dropdown-text">Product Documentation<div class="dropdown-category">PRODUCT AND SERVICES GUIDES</div></div></a></li><li class="dropdown-item"><a href="/release-notes/"><div class="dropdown-text">Product Release Notes<div class="dropdown-category">LATEST FEATURES</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/product-tours/"><div class="dropdown-text">Interactive Product Tours<div class="dropdown-category">TAKE TOUR</div></div></a></li></ul></div></li><li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/about/company/" aria-role="button" aria-haspopup="dialog" aria-controls="8ccc37d9-abd1-4395-b26e-b41799f165c2">Company</a><div id="8ccc37d9-abd1-4395-b26e-b41799f165c2" class="dropdown-content two-col" role="dialog" aria-labelledby="Company"><ul class="dropdown-menu"><li class="dropdown-title">OVERVIEW</li><li class="dropdown-item"><a href="https://www.rapid7.com/about/company/"><div class="dropdown-text">About Us<div class="dropdown-category">OUR STORY</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/leadership/"><div class="dropdown-text">Leadership<div class="dropdown-category">EXECUTIVE TEAM &amp; BOARD</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/news/"><div class="dropdown-text">News &amp; Press Releases<div class="dropdown-category">THE LATEST FROM OUR NEWSROOM</div></div></a></li><li class="dropdown-item"><a href="https://careers.rapid7.com/"><div class="dropdown-text">Careers<div class="dropdown-category">JOIN RAPID7</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/customers/"><div class="dropdown-text">Our Customers<div class="dropdown-category">Their Success Stories</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/partners/"><div class="dropdown-text">Partners<div class="dropdown-category">Rapid7 Partner Ecosystem</div></div></a></li><li class="dropdown-item"><a href="https://investors.rapid7.com/"><div class="dropdown-text">Investors<div class="dropdown-category">Investor Relations</div></div></a></li></ul><ul class="dropdown-menu"><li class="dropdown-title">COMMUNITY &amp; CULTURE</li><li class="dropdown-item"><a href="https://www.rapid7.com/about/social-good/"><div class="dropdown-text">Social Good<div class="dropdown-category">OUR COMMITMENT &amp; APPROACH</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/rapid7-foundation/"><div class="dropdown-text">Rapid7 Cybersecurity Foundation<div class="dropdown-category">BUILDING THE FUTURE</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/diversity-equity-and-inclusion/"><div class="dropdown-text">Diversity, Equity &amp; Inclusion<div class="dropdown-category">EMPOWERING PEOPLE</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/open-source/"><div class="dropdown-text">Open Source<div class="dropdown-category">STRENGTHENING CYBERSECURITY</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/public-policy/"><div class="dropdown-text">Public Policy<div class="dropdown-category">ENGAGEMENT &amp; ADVOCACY</div></div></a></li><li class="dropdown-item"><a href="https://www.rapid7.com/about/rapid7-cybersecurity-partner-boston-bruins/"><div class="dropdown-text">Boston Bruins<div class="dropdown-category">Our Partnership</div></div></a></li></ul></div></li><li class="main-nav__link "><a class="" href="https://www.rapid7.com/partners/" aria-role="button" aria-haspopup="" aria-controls="73ee715d-74a1-44bd-b532-8a9aa89bbb3d">Partners</a></li></ul></div><div class="main-nav__utility"><ul><li class="signin"><a href="https://insight.rapid7.com/saml/SSO"><img src="/Areas/Docs/includes/img/r7-nav/icon-lock.svg" alt=""/>Sign In</a></li></ul></div></div></nav><section class="search-bar hide"><div class="container flex flex-jc-c flex-ai-c"><form action="/search" class="search-content flex flex-jc-c flex-ai-c"><i class="r7-icon r7-icon-search-magnify"></i><input type="search" class="search-input" name="q" autoComplete="off" placeholder="Search"/><input type="submit" class="search-submit button blue" value="Search"/><input type="hidden" name="filters" value="productname_Insight Network Sensor"/><a class="search-close"><i class="r7-icon r7-icon-delete-x"></i></a></form></div></section><div class="search-overlay overlay "></div><nav class="sub-nav "><div class="container flex flex-jc-sb"><a class="logo circle-button" href="https://www.rapid7.com/"><img src="/Areas/Docs/includes/img/r7-nav/Rapid7_logo-short.svg" alt="Rapid7 logo"/></a><div class="sub-nav__links flex"><ul class="flex flex-ai-c"><li class="sub-nav__title"><a href="/" title="Documentation">Documentation</a></li><li class="sub-nav__link dropdown "><a href="#" class="dropdown-trigger has-toggle">Insight Network Sensor</a><div class="dropdown-content two-col--sm"><ul class="dropdown-menu"><li class="dropdown-item"><a href="/appspider/">AppSpider</a></li><li class="dropdown-item"><a href="/insight-agent/">Insight Agent</a></li><li class="dropdown-item"><a href="/insightappsec/">InsightAppSec</a></li><li class="dropdown-item"><a href="/insightcloudsec/">InsightCloudSec</a></li><li class="dropdown-item"><a href="/insightconnect/">InsightConnect</a></li><li class="dropdown-item"><a href="/insight/">Insight Platform</a></li><li class="dropdown-item"><a href="/insightidr/">InsightIDR</a></li><li class="dropdown-item"><a href="/sensor/">Insight Network Sensor</a></li><li class="dropdown-item"><a href="/insightops/">InsightOps</a></li></ul><ul class="dropdown-menu"><li class="dropdown-item"><a href="/insightvm/">InsightVM</a></li><li class="dropdown-item"><a href="/metasploit/">Metasploit</a></li><li class="dropdown-item"><a href="/nexpose/">Nexpose</a></li><li class="dropdown-item"><a href="/tcell/">tCell</a></li><li class="dropdown-item"><a href="/services/">Managed Services</a></li><li class="dropdown-item"><a href="/threat-command/">Threat Command</a></li><li class="dropdown-item"><a href="/surface-command/">Surface Command</a></li><li class="dropdown-item"><a href="/exposure-command/">Exposure Command</a></li></ul><div class="dropdown-view-all"><a href="/release-notes/">Release Notes</a></div></div></li></ul></div><div class="sub-nav__utility"><a class="search" role="button" tabindex="0"><i class="r7-icon r7-icon-search-magnify"></i></a><a class="to-top circle-button" tabindex="0"><i class="r7-icon r7-icon-arrow-chevron-up-solid"></i></a></div></div></nav></header></div> </div> <div class="sidebar-container" id="product-doc"> <div id="react_0HNALVPQ3J4QV"><div class="nav-bar"><div class="nav-bar__content"><div class="container flex flex-jc-sb flex-ai-c"><div class="flex nav-bar__column nav-bar__column--left nav-bar__column--full subnav__nav-bar"><a class="nav-bar__toggle " role="button">Docs Menu<span role="button"></span></a><div class="nav-bar__toggle-content"><div class="subnav"><div class="subnav_group"><div class="h3 subnav_group-title">Overview<span class="subnav_list-toggle plus"></span></div><div style="display:none"><ul class="subnav_list"><li class="subnav_list-item"><a href="/sensor/insight-network-sensor-overview/" class=" "><span class="subnav_list-text">Network Sensor Overview</span><span class="subnav_list-toggle plus"></span></a><div class="subnav_list-sub"><ul><li class="subnav_list-item"><a href="/sensor/benefits-of-the-insight-network-sensor/" class=" "><span class="subnav_list-text">Benefits of the Network Sensor</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/data-collected-by-the-insight-network-sensor/" class=" "><span class="subnav_list-text">Data Collected by the Network Sensor</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/how-insight-products-use-network-sensor-data/" class=" "><span class="subnav_list-text">How Insight Products Use Network Sensor Data</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></li></ul></div></div><div class="subnav_group"><div class="h3 subnav_group-title">Requirements<span class="subnav_list-toggle plus"></span></div><div style="display:none"><ul class="subnav_list"><li class="subnav_list-item"><a href="/sensor/insight-network-sensor-requirements/" class=" "><span class="subnav_list-text">Insight Network Sensor Requirements</span><span class="subnav_list-toggle plus"></span></a><div class="subnav_list-sub"><ul><li class="subnav_list-item"><a href="/sensor/network-sensor-host-system-requirements/" class=" "><span class="subnav_list-text">Network Sensor Host System Requirements</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/network-requirements-for-network-sensor-deployment/" class=" "><span class="subnav_list-text">Network Requirements for Network Sensor Deployment</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></li><li class="subnav_list-item"><a href="/sensor/network-sensor-for-aws-requirements/" class=" "><span class="subnav_list-text">Network Sensor for AWS Requirements</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></div><div class="subnav_group"><div class="h3 subnav_group-title">Deployment Guides<span class="subnav_list-toggle minus"></span></div><div><ul class="subnav_list"><li class="subnav_list-item subnav_list-item--open"><a href="/sensor/insight-network-sensor-deployment-guide/" class=" "><span class="subnav_list-text">Insight Network Sensor Deployment Guide</span><span class="subnav_list-toggle minus"></span></a><div class="subnav_list-sub"><ul><li class="subnav_list-item subnav_list-item--open"><a href="/sensor/step-1-network-sensor-location-guidelines/" class="active "><span class="subnav_list-text">Step 1: Network Sensor Location Guidelines</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/step-2-configure-a-network-traffic-source/" class=" "><span class="subnav_list-text">Step 2: Configure a Network Traffic Source</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/step-3-provision-a-network-sensor-host/" class=" "><span class="subnav_list-text">Step 3: Provision a Network Sensor Host</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/step-4-download-and-install-the-network-sensor-software/" class=" "><span class="subnav_list-text">Step 4: Download and Install the Network Sensor Software</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/step-5-configure-network-interface-details-in-the-insight-platform/" class=" "><span class="subnav_list-text">Step 5: Configure Network Interface Details in the Insight Platform</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></li><li class="subnav_list-item"><a href="/sensor/network-sensor-for-aws-deployment-guide/" class=" "><span class="subnav_list-text">Network Sensor for AWS Deployment Guide</span><span class="subnav_list-toggle plus"></span></a><div class="subnav_list-sub"><ul><li class="subnav_list-item"><a href="/sensor/option-1-network-sensor-cloudformation/" class=" "><span class="subnav_list-text">Option 1: Use Network Sensor CloudFormation Template</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/option-2-network-sensor-ami/" class=" "><span class="subnav_list-text">Option 2: Use the Network Sensor AMI</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/option-3-network-sensor-installer/" class=" "><span class="subnav_list-text">Option 3: Use the Network Sensor Installer</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/complete-configuration-data-collection-management/" class=" "><span class="subnav_list-text">Complete Sensor Configuration in Insight Data Collection Management</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/configure-mirroring/" class=" "><span class="subnav_list-text">Configure Mirroring</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></li></ul></div></div><div class="subnav_group"><div class="h3 subnav_group-title">Use your Network Sensor<span class="subnav_list-toggle plus"></span></div><div style="display:none"><ul class="subnav_list"><li class="subnav_list-item"><a href="/sensor/insight-network-sensor-management/" class=" "><span class="subnav_list-text">Network Sensor Management Overview</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/using-your-network-sensor-data/" class=" "><span class="subnav_list-text">Use your Network Sensor Data</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></div><div class="subnav_group"><div class="h3 subnav_group-title">Troubleshooting<span class="subnav_list-toggle plus"></span></div><div style="display:none"><ul class="subnav_list"><li class="subnav_list-item"><a href="/sensor/insight-network-sensor-troubleshooting/" class=" "><span class="subnav_list-text">Insight Network Sensor Troubleshooting</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></div><div class="subnav_group"><div class="h3 subnav_group-title">Release Notes<span class="subnav_list-toggle plus"></span></div><div style="display:none"><ul class="subnav_list"><li class="subnav_list-item"><a href="https://docs.rapid7.com/release-notes/insightnetworksensor/" target="_blank" class=" external"><span class="subnav_list-text">Insight Network Sensor release notes<i class="r7-icon r7-icon-open-new-tab"></i></span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></div></div></div></div><div class="flex nav-bar__column nav-bar__column--right toc__nav-bar"><a class="nav-bar__toggle " role="button">On This Page<span role="button"></span></a><div class="nav-bar__toggle-content"><nav class="toc toc--is-open" aria-label="Table of contents" style="position:sticky;opacity:1;transform:none"><div class="toc__toggle" role="button" title="Close table of contents"><span class="toc__toggle-text hide-collapsed">On This Page</span><span class="toc__toggle-icon"></span></div><ul class="hide-collapsed"><li class=""><a href="#deploy-network-sensors-at-points-of-network-traffic-convergence" class=""><span>Deploy Network Sensors at Points of Network Traffic Convergence</span></a></li><li class=""><a href="#multi-network-sensor-deployments" class=""><span>Multi-Network Sensor Deployments</span></a><ul><li><a href="#duplicate-data-limitations-of-the-network-sensor" class=""><span>Duplicate Data Limitations of the Network Sensor</span></a></li></ul></li><li class=""><a href="#handle-duplicate-data-with-the-berkeley-packet-filter-bpf" class=""><span>Handle Duplicate Data with the Berkeley Packet Filter (BPF)</span></a></li></ul></nav></div></div></div></div><div class="overlay" style="display:"></div></div><div class="container flex"><div class="sidebar-content"><div class="subnav"><div class="subnav_group"><div class="h3 subnav_group-title">Overview<span class="subnav_list-toggle plus"></span></div><div style="display:none"><ul class="subnav_list"><li class="subnav_list-item"><a href="/sensor/insight-network-sensor-overview/" class=" "><span class="subnav_list-text">Network Sensor Overview</span><span class="subnav_list-toggle plus"></span></a><div class="subnav_list-sub"><ul><li class="subnav_list-item"><a href="/sensor/benefits-of-the-insight-network-sensor/" class=" "><span class="subnav_list-text">Benefits of the Network Sensor</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/data-collected-by-the-insight-network-sensor/" class=" "><span class="subnav_list-text">Data Collected by the Network Sensor</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/how-insight-products-use-network-sensor-data/" class=" "><span class="subnav_list-text">How Insight Products Use Network Sensor Data</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></li></ul></div></div><div class="subnav_group"><div class="h3 subnav_group-title">Requirements<span class="subnav_list-toggle plus"></span></div><div style="display:none"><ul class="subnav_list"><li class="subnav_list-item"><a href="/sensor/insight-network-sensor-requirements/" class=" "><span class="subnav_list-text">Insight Network Sensor Requirements</span><span class="subnav_list-toggle plus"></span></a><div class="subnav_list-sub"><ul><li class="subnav_list-item"><a href="/sensor/network-sensor-host-system-requirements/" class=" "><span class="subnav_list-text">Network Sensor Host System Requirements</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/network-requirements-for-network-sensor-deployment/" class=" "><span class="subnav_list-text">Network Requirements for Network Sensor Deployment</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></li><li class="subnav_list-item"><a href="/sensor/network-sensor-for-aws-requirements/" class=" "><span class="subnav_list-text">Network Sensor for AWS Requirements</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></div><div class="subnav_group"><div class="h3 subnav_group-title">Deployment Guides<span class="subnav_list-toggle minus"></span></div><div><ul class="subnav_list"><li class="subnav_list-item subnav_list-item--open"><a href="/sensor/insight-network-sensor-deployment-guide/" class=" "><span class="subnav_list-text">Insight Network Sensor Deployment Guide</span><span class="subnav_list-toggle minus"></span></a><div class="subnav_list-sub"><ul><li class="subnav_list-item subnav_list-item--open"><a href="/sensor/step-1-network-sensor-location-guidelines/" class="active "><span class="subnav_list-text">Step 1: Network Sensor Location Guidelines</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/step-2-configure-a-network-traffic-source/" class=" "><span class="subnav_list-text">Step 2: Configure a Network Traffic Source</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/step-3-provision-a-network-sensor-host/" class=" "><span class="subnav_list-text">Step 3: Provision a Network Sensor Host</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/step-4-download-and-install-the-network-sensor-software/" class=" "><span class="subnav_list-text">Step 4: Download and Install the Network Sensor Software</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/step-5-configure-network-interface-details-in-the-insight-platform/" class=" "><span class="subnav_list-text">Step 5: Configure Network Interface Details in the Insight Platform</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></li><li class="subnav_list-item"><a href="/sensor/network-sensor-for-aws-deployment-guide/" class=" "><span class="subnav_list-text">Network Sensor for AWS Deployment Guide</span><span class="subnav_list-toggle plus"></span></a><div class="subnav_list-sub"><ul><li class="subnav_list-item"><a href="/sensor/option-1-network-sensor-cloudformation/" class=" "><span class="subnav_list-text">Option 1: Use Network Sensor CloudFormation Template</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/option-2-network-sensor-ami/" class=" "><span class="subnav_list-text">Option 2: Use the Network Sensor AMI</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/option-3-network-sensor-installer/" class=" "><span class="subnav_list-text">Option 3: Use the Network Sensor Installer</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/complete-configuration-data-collection-management/" class=" "><span class="subnav_list-text">Complete Sensor Configuration in Insight Data Collection Management</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/configure-mirroring/" class=" "><span class="subnav_list-text">Configure Mirroring</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></li></ul></div></div><div class="subnav_group"><div class="h3 subnav_group-title">Use your Network Sensor<span class="subnav_list-toggle plus"></span></div><div style="display:none"><ul class="subnav_list"><li class="subnav_list-item"><a href="/sensor/insight-network-sensor-management/" class=" "><span class="subnav_list-text">Network Sensor Management Overview</span></a><div class="subnav_list-sub"><ul></ul></div></li><li class="subnav_list-item"><a href="/sensor/using-your-network-sensor-data/" class=" "><span class="subnav_list-text">Use your Network Sensor Data</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></div><div class="subnav_group"><div class="h3 subnav_group-title">Troubleshooting<span class="subnav_list-toggle plus"></span></div><div style="display:none"><ul class="subnav_list"><li class="subnav_list-item"><a href="/sensor/insight-network-sensor-troubleshooting/" class=" "><span class="subnav_list-text">Insight Network Sensor Troubleshooting</span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></div><div class="subnav_group"><div class="h3 subnav_group-title">Release Notes<span class="subnav_list-toggle plus"></span></div><div style="display:none"><ul class="subnav_list"><li class="subnav_list-item"><a href="https://docs.rapid7.com/release-notes/insightnetworksensor/" target="_blank" class=" external"><span class="subnav_list-text">Insight Network Sensor release notes<i class="r7-icon r7-icon-open-new-tab"></i></span></a><div class="subnav_list-sub"><ul></ul></div></li></ul></div></div></div></div><div class="main-content"><div class="inner-content"><div class="html-block"><h1 id="step-1-network-sensor-location-guidelines" class="page-title">Step 1: Network Sensor Location Guidelines<span title="Copy link to clipboard"></span></h1><p>Deciding where to locate an Insight Network Sensor in your environment is an important first step when undertaking any network sensor deployment procedure. This article introduces the key concept of network traffic convergence to help you pick the right deployment locations, offers guidelines for multi-network sensor deployments, and covers potential duplicate data scenarios.</p><h2 id="deploy-network-sensors-at-points-of-network-traffic-convergence">Deploy Network Sensors at Points of Network Traffic Convergence<span class="copy-btn" title="Copy link to clipboard"></span></h2><p>To ensure that all of your network traffic is fully covered by as few network sensors as possible, you need to focus your location decisions on areas of network traffic convergence.</p><p>While all networks vary in topology, scale, and segmentation, a typical network usually consists of at least one data center tied together with a core switch. By nature, core switches are ideal network traffic convergence zones, and Rapid7 recommends a mirror port-equipped core switch for your network sensor deployment for this very reason.</p><p>If your network is too small for a mirror port-equipped core switch, you can deploy Test Access Points (TAPs) inline between your internet gateway and your switch device to create your own network traffic convergence areas for the network sensor to use.</p><div class="block-callout info"><p>VMware includes powerful and flexible traffic mirroring functionality that allows you to easily deploy multiple sensors and monitor either internal east west traffic, traffic across multiple ESX servers, or external SPAN traffic. For additional detail and related video tutorials, check out <a href="/sensor/step-2-configure-a-network-traffic-source#section-virtual-traffic-sources">Virtual Traffic Sources</a>.</p></div><h2 id="multi-network-sensor-deployments">Multi-Network Sensor Deployments<span class="copy-btn" title="Copy link to clipboard"></span></h2><p>The following scenarios are typical cases for deploying multiple network sensors:</p><ul><li>If your overall network throughput figures exceed what a single network sensor can accommodate, you can deploy multiple network sensors to achieve complete coverage. The same network traffic convergence principle still applies in this scenario. However, as a general guideline, your network traffic monitoring deployment should strive to achieve full coverage with as few network sensors as possible.</li><li>If your organization consists of several remote data centers, deploying a network sensor for each is ideal for gaining visibility on their local activity.</li></ul><h3 id="duplicate-data-limitations-of-the-network-sensor">Duplicate Data Limitations of the Network Sensor<span class="copy-btn" title="Copy link to clipboard"></span></h3><p>When deploying multiple network sensors, take care to ensure that they do not ingest and process the same network traffic more than once. However, the network sensor does feature a packet filtering tool (covered in the next section) where you can tune what kinds of traffic each network sensor can monitor, and what kinds can be ignored.</p><h2 id="handle-duplicate-data-with-the-berkeley-packet-filter-bpf">Handle Duplicate Data with the Berkeley Packet Filter (BPF)<span class="copy-btn" title="Copy link to clipboard"></span></h2><p>Depending on your network configuration, sometimes the capture of duplicate data is unavoidable in a multi-network sensor environment. To mitigate against this condition, the network sensor includes a component called the Berkeley Packet Filter (BPF) that you can configure to ignore specific types of network traffic on a per-network sensor basis as needed.</p><div class="block-callout info"><h3 id="TIP" class="block-callout__title">TIP<span class="copy-btn" title="Copy link to clipboard"></span></h3><p>After you deploy one or more network sensors, you can configure any BPF settings in the <a href="/sensor/insight-network-sensor-management">network sensor management</a> experience of the Insight platform.</p></div></div><div class="feedback "><div class="feedback__title">Did this page help you?</div><button class="feedback__yes flex flex-ai-c"><img src="/Areas/Docs/includes/img/icon-thumbs-up.svg"/> Yes</button><button class="feedback__no flex flex-ai-c"><img src="/Areas/Docs/includes/img/icon-thumbs-up.svg"/> No</button></div><div class="postnav"><a href="/sensor/insight-network-sensor-deployment-guide" class="postnav__link prev"><div class="postnav__icon"><i class="r7-icon r7-icon-arrow-chevron-right"></i></div><div class="postnav__text"><div class="postnav__parent">Deployment Guides</div><div class="postnav__post">Insight Network Sensor Deployment Guide</div></div></a><a href="/sensor/step-2-configure-a-network-traffic-source" class="postnav__link next"><div class="postnav__text"><div class="postnav__parent">Deployment Guides</div><div class="postnav__post">Step 2: Configure a Network Traffic Source</div></div><div class="postnav__icon"><i class="r7-icon r7-icon-arrow-chevron-right"></i></div></a></div></div></div><aside class="gutter"><nav class="toc toc--is-open" aria-label="Table of contents" style="position:sticky;opacity:1;transform:none"><div class="toc__toggle" role="button" title="Close table of contents"><span class="toc__toggle-text hide-collapsed">On This Page</span><span class="toc__toggle-icon"></span></div><ul class="hide-collapsed"><li class=""><a href="#deploy-network-sensors-at-points-of-network-traffic-convergence" class=""><span>Deploy Network Sensors at Points of Network Traffic Convergence</span></a></li><li class=""><a href="#multi-network-sensor-deployments" class=""><span>Multi-Network Sensor Deployments</span></a><ul><li><a href="#duplicate-data-limitations-of-the-network-sensor" class=""><span>Duplicate Data Limitations of the Network Sensor</span></a></li></ul></li><li class=""><a href="#handle-duplicate-data-with-the-berkeley-packet-filter-bpf" class=""><span>Handle Duplicate Data with the Berkeley Packet Filter (BPF)</span></a></li></ul></nav></aside></div><div class="postnav-border"></div></div> </div> <footer class="footer"> <div class="container wrapper"> <section class="footer__links"> <div class="footer__links-wrapper"> <div class="footer__links-col"> <div class="footer__links-section footer__contact"> <a href="https://www.rapid7.com"> <img alt="Rapid7 logo" class="logo" data-src="/Areas/Docs/includes/img/r7-nav/Rapid7_logo.svg" src="/Areas/Docs/includes/img/r7-nav/Rapid7_logo.svg"> </a> <div class="footer__links-title">CUSTOMER SUPPORT</div> <a class="link" href="tel:1-866-390-8113">+1-866-390-8113 (Toll Free)</a> <div class="footer__links-title">SALES SUPPORT</div> <a class="link" href="tel:866-772-7437">+1-866-772-7437 (Toll Free)</a> <div class="footer__breach"> <div class="footer__breach-title">Need to report an Escalation or a Breach?</div> <div class="footer__breach-contact"> <div class="footer__breach-icon"></div> <div class="footer__breach-phone"><a href="https://www.rapid7.com/services/incident-response-customer-escalation/">Get Help</a></div> </div> </div> </div> <div class="footer__links-section footer__solutions"> <div class="footer__links-title">SOLUTIONS</div> <a class="link" href="https://www.rapid7.com/platform/">The Command Platform</a> <a class="link" href="https://www.rapid7.com/products/command/exposure-management/">Exposure Command</a> <a class="link" href="https://www.rapid7.com/services/managed-detection-and-response-mdr/">Managed Threat Complete</a> </div> </div> <div class="footer__links-col"> <div class="footer__links-section footer__support"> <div class="footer__links-title">SUPPORT & RESOURCES</div> <a class="link" href="https://www.rapid7.com/for-customers/">Product Support</a> <a class="link" href="https://www.rapid7.com/resources/">Resource Library</a> <a class="link" href="https://www.rapid7.com/customers/">Our Customers</a> <a class="link" href="https://www.rapid7.com/about/events-webcasts/">Events & Webcasts</a> <a class="link" href="https://www.rapid7.com/services/training-certification/">Training & Certification</a> <a class="link" href="https://www.rapid7.com/fundamentals/">Cybersecurity Fundamentals</a> <a class="link" href="https://www.rapid7.com/db/">Vulnerability & Exploit Database</a> </div> <div class="footer__links-section footer__about"> <div class="footer__links-title">ABOUT US</div> <a class="link" href="https://www.rapid7.com/about/company/">Company</a> <a class="link" href="https://www.rapid7.com/about/diversity-equity-and-inclusion/">Diversity, Equity, and Inclusion</a> <a class="link" href="https://www.rapid7.com/about/leadership/">Leadership</a> <a class="link" href="https://www.rapid7.com/about/news/">News & Press Releases</a> <a class="link" href="https://www.rapid7.com/about/public-policy/">Public Policy</a> <a class="link" href="https://www.rapid7.com/open-source/">Open Source</a> <a class="link" href="https://investors.rapid7.com/overview/default.aspx">Investors</a> </div> </div> <div class="footer__links-col"> <div class="footer__links-section footer__connect"> <div class="footer__links-title">CONNECT WITH US</div> <a class="link" href="https://www.rapid7.com/contact/">Contact</a> <a class="link" href="https://www.rapid7.com/blog/">Blog</a> <a class="link" href="https://insight.rapid7.com/login">Support Login</a> <a class="link" href="https://careers.rapid7.com/careers-home">Careers</a> <div class="footer__links-social"> <a class="linkedin" href="https://www.linkedin.com/company/39624" target="_blank"></a> <a class="twitter" href="https://twitter.com/Rapid7" target="_blank"></a> <a class="facebook" href="https://www.facebook.com/rapid7" target="_blank"></a> <a class="instagram" href="https://www.instagram.com/rapid7/" target="_blank"></a> </div> <div class="footer__links-partner"> <a class="bruins-link no-new-open" href="https://www.rapid7.com/about/rapid7-cybersecurity-partner-boston-bruins/" target="_blank"> <img class="bruins" src="/includes/img/rapid7-officialpartner-darkbg.png" title="Rapid7 Official Cybersecurity Partner of the Boston Bruins" alt="Rapid7 Official Cybersecurity Partner of the Boston Bruins" /> </a> </div> </div> </div> </div> </section> </div> <section class="footer__legal"> <div class="container wrapper"> <div class="footer__legal-copyright">漏 Rapid7</div> <div class="footer__legal-link"><a href="https://www.rapid7.com/legal">Legal Terms</a></div> &nbsp; | &nbsp; <div class="footer__legal-link"><a href="https://www.rapid7.com/privacy-policy">Privacy Policy</a></div> &nbsp; | &nbsp; <div class="footer__legal-link"><a href="https://www.rapid7.com/export-notice">Export Notice</a></div> &nbsp; | &nbsp; <div class="footer__legal-link"><a href="https://www.rapid7.com/trust">Trust</a> </div> </div> </section> </footer> <script src="/areas/docs/includes/dist/runtime.bundle.js?91b95aada2e8e5c1bfd9"></script><script src="/areas/docs/includes/dist/vendor.bundle.js?91b95aada2e8e5c1bfd9"></script><script src="/areas/docs/includes/dist/app.bundle.js?91b95aada2e8e5c1bfd9"></script> <script>ReactDOM.hydrate(React.createElement(Components.ProductDocPage, {"basePath":"sensor","product":"Insight Network Sensor","productFolder":"sensor","pagePath":"/step-1-network-sensor-location-guidelines","navItems":[{"title":"Overview","navItems":[{"text":"Network Sensor Overview","href":"/insight-network-sensor-overview","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[{"text":"Benefits of the Network Sensor","href":"/benefits-of-the-insight-network-sensor","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Data Collected by the Network Sensor","href":"/data-collected-by-the-insight-network-sensor","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"How Insight Products Use Network Sensor Data","href":"/how-insight-products-use-network-sensor-data","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false}],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false}],"isHeader":false},{"title":"Requirements","navItems":[{"text":"Insight Network Sensor Requirements","href":"/insight-network-sensor-requirements","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[{"text":"Network Sensor Host System Requirements","href":"/network-sensor-host-system-requirements","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Network Requirements for Network Sensor Deployment","href":"/network-requirements-for-network-sensor-deployment","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false}],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Network Sensor for AWS Requirements","href":"/network-sensor-for-aws-requirements","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false}],"isHeader":false},{"title":"Deployment Guides","navItems":[{"text":"Insight Network Sensor Deployment Guide","href":"/insight-network-sensor-deployment-guide","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":"Deployment Guides","children":[{"text":"Step 1: Network Sensor Location Guidelines","href":"/step-1-network-sensor-location-guidelines","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":true,"reqIpimsAuth":false},{"text":"Step 2: Configure a Network Traffic Source","href":"/step-2-configure-a-network-traffic-source","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":"Deployment Guides","children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Step 3: Provision a Network Sensor Host","href":"/step-3-provision-a-network-sensor-host","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Step 4: Download and Install the Network Sensor Software","href":"/step-4-download-and-install-the-network-sensor-software","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Step 5: Configure Network Interface Details in the Insight Platform","href":"/step-5-configure-network-interface-details-in-the-insight-platform","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false}],"isHidden":false,"isToggled":true,"isSelected":false,"reqIpimsAuth":false},{"text":"Network Sensor for AWS Deployment Guide","href":"/network-sensor-for-aws-deployment-guide","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[{"text":"Option 1: Use Network Sensor CloudFormation Template","href":"/option-1-network-sensor-cloudformation","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Option 2: Use the Network Sensor AMI","href":"/option-2-network-sensor-ami","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Option 3: Use the Network Sensor Installer","href":"/option-3-network-sensor-installer","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Complete Sensor Configuration in Insight Data Collection Management","href":"/complete-configuration-data-collection-management","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Configure Mirroring","href":"/configure-mirroring","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false}],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false}],"isHeader":false},{"title":"Use your Network Sensor","navItems":[{"text":"Network Sensor Management Overview","href":"/insight-network-sensor-management","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Use your Network Sensor Data","href":"/using-your-network-sensor-data","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false}],"isHeader":false},{"title":"Troubleshooting","navItems":[{"text":"Insight Network Sensor Troubleshooting","href":"/insight-network-sensor-troubleshooting","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false}],"isHeader":false},{"title":"Release Notes","navItems":[{"text":"Insight Network Sensor release notes","href":"https://docs.rapid7.com/release-notes/insightnetworksensor/","basePath":"sensor","productFolder":"sensor","isExternal":true,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false}],"isHeader":false}],"htmlDoc":{"html":"\u003cp\u003eDeciding where to locate an Insight Network Sensor in your environment is an important first step when undertaking any network sensor deployment procedure. This article introduces the key concept of network traffic convergence to help you pick the right deployment locations, offers guidelines for multi-network sensor deployments, and covers potential duplicate data scenarios.\u003c/p\u003e\n\u003ch2 id=\u0022deploy-network-sensors-at-points-of-network-traffic-convergence\u0022\u003eDeploy Network Sensors at Points of Network Traffic Convergence\u003c/h2\u003e\n\u003cp\u003eTo ensure that all of your network traffic is fully covered by as few network sensors as possible, you need to focus your location decisions on areas of network traffic convergence.\u003c/p\u003e\n\u003cp\u003eWhile all networks vary in topology, scale, and segmentation, a typical network usually consists of at least one data center tied together with a core switch. By nature, core switches are ideal network traffic convergence zones, and Rapid7 recommends a mirror port-equipped core switch for your network sensor deployment for this very reason.\u003c/p\u003e\n\u003cp\u003eIf your network is too small for a mirror port-equipped core switch, you can deploy Test Access Points (TAPs) inline between your internet gateway and your switch device to create your own network traffic convergence areas for the network sensor to use.\u003c/p\u003e\n\u003cdiv class=\u0022block-callout info\u0022\u003e\u003cp\u003eVMware includes powerful and flexible traffic mirroring functionality that allows you to easily deploy multiple sensors and monitor either internal east west traffic, traffic across multiple ESX servers, or external SPAN traffic. For additional detail and related video tutorials, check out \u003ca href=\u0022/sensor/step-2-configure-a-network-traffic-source#section-virtual-traffic-sources\u0022\u003eVirtual Traffic Sources\u003c/a\u003e.\u003c/p\u003e\n\u003c/div\u003e\u003ch2 id=\u0022multi-network-sensor-deployments\u0022\u003eMulti-Network Sensor Deployments\u003c/h2\u003e\n\u003cp\u003eThe following scenarios are typical cases for deploying multiple network sensors:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIf your overall network throughput figures exceed what a single network sensor can accommodate, you can deploy multiple network sensors to achieve complete coverage. The same network traffic convergence principle still applies in this scenario. However, as a general guideline, your network traffic monitoring deployment should strive to achieve full coverage with as few network sensors as possible.\u003c/li\u003e\n\u003cli\u003eIf your organization consists of several remote data centers, deploying a network sensor for each is ideal for gaining visibility on their local activity.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3 id=\u0022duplicate-data-limitations-of-the-network-sensor\u0022\u003eDuplicate Data Limitations of the Network Sensor\u003c/h3\u003e\n\u003cp\u003eWhen deploying multiple network sensors, take care to ensure that they do not ingest and process the same network traffic more than once. However, the network sensor does feature a packet filtering tool (covered in the next section) where you can tune what kinds of traffic each network sensor can monitor, and what kinds can be ignored.\u003c/p\u003e\n\u003ch2 id=\u0022handle-duplicate-data-with-the-berkeley-packet-filter-bpf\u0022\u003eHandle Duplicate Data with the Berkeley Packet Filter (BPF)\u003c/h2\u003e\n\u003cp\u003eDepending on your network configuration, sometimes the capture of duplicate data is unavoidable in a multi-network sensor environment. To mitigate against this condition, the network sensor includes a component called the Berkeley Packet Filter (BPF) that you can configure to ignore specific types of network traffic on a per-network sensor basis as needed.\u003c/p\u003e\n\u003cdiv class=\u0022block-callout info\u0022\u003e\u003ch3 id=\u0022TIP\u0022 class=\u0022block-callout__title\u0022\u003eTIP\u003c/h3\u003e\u003cp\u003eAfter you deploy one or more network sensors, you can configure any BPF settings in the \u003ca href=\u0022/sensor/insight-network-sensor-management\u0022\u003enetwork sensor management\u003c/a\u003e experience of the Insight platform.\u003c/p\u003e\n\u003c/div\u003e","metadata":{"title":"Step 1: Network Sensor Location Guidelines","excerpt":"Learn best practices for locating your Insight Network Sensor.","DateModified":null,"isHidden":false,"canonicalUrl":"http://docs.rapid7.com/sensor/step-1-network-sensor-location-guidelines"},"hasContent":true,"errorsList":[],"prevLink":{"text":"Insight Network Sensor Deployment Guide","href":"/insight-network-sensor-deployment-guide","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":"Deployment Guides","children":[{"text":"Step 1: Network Sensor Location Guidelines","href":"/step-1-network-sensor-location-guidelines","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":true,"reqIpimsAuth":false},{"text":"Step 2: Configure a Network Traffic Source","href":"/step-2-configure-a-network-traffic-source","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":"Deployment Guides","children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Step 3: Provision a Network Sensor Host","href":"/step-3-provision-a-network-sensor-host","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Step 4: Download and Install the Network Sensor Software","href":"/step-4-download-and-install-the-network-sensor-software","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},{"text":"Step 5: Configure Network Interface Details in the Insight Platform","href":"/step-5-configure-network-interface-details-in-the-insight-platform","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":null,"children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false}],"isHidden":false,"isToggled":true,"isSelected":false,"reqIpimsAuth":false},"nextLink":{"text":"Step 2: Configure a Network Traffic Source","href":"/step-2-configure-a-network-traffic-source","basePath":"sensor","productFolder":"sensor","isExternal":false,"group":"Deployment Guides","children":[],"isHidden":false,"isToggled":false,"isSelected":false,"reqIpimsAuth":false},"expandedNavGroupTitle":"Deployment Guides","expandedSubNavTitle":"Insight Network Sensor Deployment Guide","statusCode":200,"redirectUrl":null,"headings":[{"id":"deploy-network-sensors-at-points-of-network-traffic-convergence","title":"Deploy Network Sensors at Points of Network Traffic Convergence","items":[]},{"id":"multi-network-sensor-deployments","title":"Multi-Network Sensor Deployments","items":[{"id":"duplicate-data-limitations-of-the-network-sensor","title":"Duplicate Data Limitations of the Network Sensor","items":[]}]},{"id":"handle-duplicate-data-with-the-berkeley-packet-filter-bpf","title":"Handle Duplicate Data with the Berkeley Packet Filter (BPF)","items":[]}]},"dateUpdated":null,"productName":"Insight Network Sensor","branch":"master","isAuthenticated":false}), document.getElementById("react_0HNALVPQ3J4QV")); ReactDOM.hydrate(React.createElement(Common.GlobalNav, {"logo":{"imagePath":"/Areas/Docs/includes/img/r7-nav/Rapid7_logo.svg","text":"Rapid7 Home","url":"https://www.rapid7.com/","target":"_blank"},"navItems":[{"id":"b8a00c37-bcb5-4dce-8f44-12a67be58b3c","link":{"text":"Platform","url":"","target":null},"columns":[{"title":"PLATFORM","links":[{"description":"ELITE TECHNOLOGY","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Platform","url":"https://www.rapid7.com/platform/","target":null},{"description":"INTELLIGENT TOOLS","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"AI-Engine","url":"https://www.rapid7.com/platform/artificial-intelligence-features/","target":null},{"description":"TRUSTED INTELLIGENCE","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Rapid7 Labs","url":"https://www.rapid7.com/research/","target":null}]},{"title":"SOLUTIONS","links":[{"description":"MANAGED XDR","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Managed Threat Complete","url":"https://www.rapid7.com/services/managed-detection-and-response-mdr/","target":null},{"description":"ATTACK SURFACE MANAGEMENT","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Surface Command","url":"https://www.rapid7.com/products/command/attack-surface-management-asm/","target":null},{"description":"EXPOSURE MANAGEMENT","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Exposure Command","url":"https://www.rapid7.com/products/command/exposure-management/","target":null}]}],"footerContent":{"columns":[{"pretitle":"TECHNOLOGY","title":"The Rapid7 Command Platform","subtitle":"AI-Powered Cybersecurity Platform","link":{"text":"Explore","url":"https://www.rapid7.com/platform/","target":null}}]},"isSelected":false},{"id":"a8576a87-8871-4fe8-91b9-8a74c27561a0","link":{"text":"Products","url":"https://www.rapid7.com/products/","target":null},"columns":[{"title":"DETECTION \u0026 RESPONSE","links":[{"description":"INSIGHTIDR","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Next-Gen SIEM","url":"https://www.rapid7.com/products/insightidr/","target":null},{"description":"THREAT COMMAND","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Threat Intelligence","url":"https://www.rapid7.com/products/threat-command/","target":null}]},{"title":"EXPOSURE MANAGEMENT","links":[{"description":"EXPOSURE COMMAND","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Exposure Management","url":"https://www.rapid7.com/products/command/exposure-management/","target":null},{"description":"SURFACE COMMAND","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Attack Surface Management","url":"https://www.rapid7.com/products/command/attack-surface-management-asm/","target":null},{"description":"INSIGHTVM","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Vulnerability Management","url":"https://www.rapid7.com/products/insightvm/","target":null},{"description":"INSIGHTCLOUDSEC","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Cloud-Native Application Protection","url":"https://www.rapid7.com/products/insightcloudsec/","target":null},{"description":"INSIGHTAPPSEC","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Application Security Testing","url":"https://www.rapid7.com/products/insightappsec/","target":null}]}],"footerContent":{"columns":[{"pretitle":"NEW!","title":"Exposure Command","subtitle":"Take Command of Your Attack Surface","link":{"text":"Request Demo","url":"https://www.rapid7.com/products/command/request-demo/","target":null}}]},"isSelected":false},{"id":"9112363a-a38f-45ed-b175-8a589dd3615b","link":{"text":"Services","url":"https://www.rapid7.com/services/","target":null},"columns":[{"title":"DETECTION \u0026 RESPONSE","links":[{"description":"MANAGED THREAT COMPLETE","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Managed XDR","url":"https://www.rapid7.com/services/managed-detection-and-response-mdr/","target":null},{"description":"EXPERIENCING A BREACH?","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Incident Response Services","url":"https://www.rapid7.com/services/incident-response-customer-escalation/","target":null}]},{"title":"EXPOSURE MANAGEMENT","links":[{"description":"OPTIMIZED RISK ASSESSMENT","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Managed Vulnerability Management","url":"https://www.rapid7.com/services/managed-services/vulnerability-management/","target":null},{"description":"MANAGED DAST","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Managed Application Security","url":"https://www.rapid7.com/services/managed-services/managed-appsec/","target":null},{"description":"VECTOR COMMAND","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Continuous Red Teaming","url":"https://www.rapid7.com/services/continuous-red-team-service/","target":null},{"description":"TEST YOUR DEFENSES","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Penetration Testing Services","url":"https://www.rapid7.com/services/security-consulting/penetration-testing-services/","target":null}]}],"footerContent":{"columns":[{"pretitle":"MXDR","title":"Managed Threat Complete","subtitle":"24x7 MXDR to secure your extended ecosystem","link":{"text":"Request Demo","url":"https://www.rapid7.com/services/managed-detection-and-response-mdr/demo/","target":null}}]},"isSelected":false},{"id":"953b8b00-e5c8-44aa-b1b8-1f2bf18beed2","link":{"text":"Resources","url":"","target":null},"columns":[{"title":"STAY CURRENT","links":[{"description":"MEET THE RESEARCH TEAM","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"About Rapid7 Labs","url":"https://www.rapid7.com/research/","target":null},{"description":"CATCH US LIVE","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Events \u0026 Webinars","url":"https://www.rapid7.com/about/events-webcasts/","target":null},{"description":"DIVE INTO THE DETAILS","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Resources Library","url":"https://www.rapid7.com/resources/","target":null},{"description":"STAY UP-TO-DATE","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"The Rapid7 Blog","url":"https://www.rapid7.com/blog/","target":null},{"description":"SEARCH THOUSANDS OF CVES","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Exploit Database","url":"https://www.rapid7.com/db/","target":null},{"description":"LEARN THE BASICS","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Cybersecurity Fundamentals","url":"https://www.rapid7.com/fundamentals/","target":null}]},{"title":"PRODUCT SUPPORT","links":[{"description":"TALK TO AN EXPERT","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Contact Sales","url":"https://www.rapid7.com/contact/","target":null},{"description":"CONTACT SUPPORT","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Customer Support Portal","url":"https://www.rapid7.com/for-customers/","target":null},{"description":"CONNECT EVERYTHING","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Product Integrations","url":"https://extensions.rapid7.com/","target":null},{"description":"PRODUCT AND SERVICES GUIDES","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Product Documentation","url":"/","target":null},{"description":"LATEST FEATURES","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Product Release Notes","url":"/release-notes/","target":null},{"description":"TAKE TOUR","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Interactive Product Tours","url":"https://www.rapid7.com/product-tours/","target":null}]}],"footerContent":{"columns":[{"pretitle":"NEW","title":"The Take Command Summit is back!","subtitle":"Our largest virtual event returns Apr. 9","link":{"text":"Register","url":"https://rapid7.brighttalk.com/?utm_source=referral\u0026utm_medium=website\u0026utm_campaign=global-pla-take-command-summit-prospect-eng","target":null}}]},"isSelected":false},{"id":"8ccc37d9-abd1-4395-b26e-b41799f165c2","link":{"text":"Company","url":"https://www.rapid7.com/about/company/","target":null},"columns":[{"title":"OVERVIEW","links":[{"description":"OUR STORY","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"About Us","url":"https://www.rapid7.com/about/company/","target":null},{"description":"EXECUTIVE TEAM \u0026 BOARD","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Leadership","url":"https://www.rapid7.com/about/leadership/","target":null},{"description":"THE LATEST FROM OUR NEWSROOM","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"News \u0026 Press Releases","url":"https://www.rapid7.com/about/news/","target":null},{"description":"JOIN RAPID7","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Careers","url":"https://careers.rapid7.com/","target":null},{"description":"Their Success Stories","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Our Customers","url":"https://www.rapid7.com/customers/","target":null},{"description":"Rapid7 Partner Ecosystem","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Partners","url":"https://www.rapid7.com/partners/","target":null},{"description":"Investor Relations","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Investors","url":"https://investors.rapid7.com/","target":null}]},{"title":"COMMUNITY \u0026 CULTURE","links":[{"description":"OUR COMMITMENT \u0026 APPROACH","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Social Good","url":"https://www.rapid7.com/about/social-good/","target":null},{"description":"BUILDING THE FUTURE","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Rapid7 Cybersecurity Foundation","url":"https://www.rapid7.com/about/rapid7-foundation/","target":null},{"description":"EMPOWERING PEOPLE","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Diversity, Equity \u0026 Inclusion","url":"https://www.rapid7.com/about/diversity-equity-and-inclusion/","target":null},{"description":"STRENGTHENING CYBERSECURITY","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Open Source","url":"https://www.rapid7.com/open-source/","target":null},{"description":"ENGAGEMENT \u0026 ADVOCACY","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Public Policy","url":"https://www.rapid7.com/about/public-policy/","target":null},{"description":"Our Partnership","iconPath":"/Areas/Docs/includes/img/r7-nav/icon-cloud.svg","text":"Boston Bruins","url":"https://www.rapid7.com/about/rapid7-cybersecurity-partner-boston-bruins/","target":null}]}],"footerContent":{"columns":[]},"isSelected":false},{"id":"73ee715d-74a1-44bd-b532-8a9aa89bbb3d","link":{"text":"Partners","url":"https://www.rapid7.com/partners/","target":null},"links":[],"isSelected":false}],"languageLinks":[],"userNav":{"contextUser":null,"signIn":{"text":"Sign In","url":"https://insight.rapid7.com/saml/SSO","target":null},"signOut":{"text":"Sign out","url":"/account/logout?redirectUri=https%3a%2f%2finsight.rapid7.com%2fsaml%2flogout%3flocal%3dfalse%26fromURI%3dhttp%3a%2f%2fdocs.rapid7.com%2fsensor%2fstep-1-network-sensor-location-guidelines%2f","target":null}},"labels":{"search":"Search","searchPlaceholder":"Search"},"subNav":{"title":{"text":"Documentation","url":"/","target":null},"navItems":[{"id":"0857fefd-3493-4920-ac43-b91d387cd2c4","link":{"text":"AppSpider","url":"/appspider/","target":null}},{"id":"a195308b-366a-4515-95d1-38111a516dd8","link":{"text":"Insight Agent","url":"/insight-agent/","target":null}},{"id":"5918164c-e648-4bb0-8b55-3573cc07b199","link":{"text":"InsightAppSec","url":"/insightappsec/","target":null}},{"id":"f8815ceb-af8d-45a6-9641-bb114fa70bfc","link":{"text":"InsightCloudSec","url":"/insightcloudsec/","target":null}},{"id":"f6f2842c-ba2b-41ac-b0bb-f5ae5f3bbdaf","link":{"text":"InsightConnect","url":"/insightconnect/","target":null}},{"id":"99f30ebc-9628-4a24-919a-fab4ebf878e6","link":{"text":"Insight Platform","url":"/insight/","target":null}},{"id":"6f42a524-b71f-4f7b-9697-053cc2ba46cc","link":{"text":"InsightIDR","url":"/insightidr/","target":null}},{"id":"ff37dcf9-a9d4-4d63-9f45-22d3a77f9403","link":{"text":"Insight Network Sensor","url":"/sensor/","target":null}},{"id":"84b5c26c-7461-421f-a969-f128999ac623","link":{"text":"InsightOps","url":"/insightops/","target":null}},{"id":"8630f4fb-7dfe-45b9-a11f-dae0a118652f","link":{"text":"InsightVM","url":"/insightvm/","target":null}},{"id":"d316a67e-1200-4d2b-9175-e7bee38f3d87","link":{"text":"Metasploit","url":"/metasploit/","target":null}},{"id":"84245c07-25fb-40c1-84bb-010c18721ceb","link":{"text":"Nexpose","url":"/nexpose/","target":null}},{"id":"2aee2fa3-9698-4639-bf56-3c4b522ff75d","link":{"text":"tCell","url":"/tcell/","target":null}},{"id":"2cf28a61-ac54-4fa7-ab43-58cf929b3514","link":{"text":"Managed Services","url":"/services/","target":null}},{"id":"914b911d-bc85-4708-bc23-a26212287f19","link":{"text":"Threat Command","url":"/threat-command/","target":null}},{"id":"e638c8ba-e521-40a0-9af6-bd5a54327d33","link":{"text":"Surface Command","url":"/surface-command/","target":null}},{"id":"65d77368-4d08-4da3-97a8-26587ea0fbd2","link":{"text":"Exposure Command","url":"/exposure-command/","target":null}}],"ctaLink":null,"logo":{"imagePath":"/Areas/Docs/includes/img/r7-nav/Rapid7_logo-short.svg","text":"Rapid7 logo","url":"https://www.rapid7.com/","target":null},"selectedSubNavItemId":null,"activeSubNavItemId":"ff37dcf9-a9d4-4d63-9f45-22d3a77f9403","singleDropdownItemCount":5,"doubleDropdownItemCount":8,"footerLink":{"text":"Release Notes","url":"/release-notes/","target":null},"defaultNavItemText":"All Products"},"searchSettings":{"enabled":true,"searchUrl":"/search","querystringKey":"q","params":{"filters":"productname_Insight Network Sensor"}},"cssClass":"r7-nav--wide","hideSubNav":false}), document.getElementById("react_0HNALVPQ3J4R0")); </script> <!-- Google Tag Manager (noscript) --> <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-WBTPTVC" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript> <!-- End Google Tag Manager (noscript) --> </body> </html>

Pages: 1 2 3 4 5 6 7 8 9 10