Enterprise Recon 2.1

All Documentation > ER 2.1 > Getting Started > Licensing

Licensing

This section covers the following topics:

Subscription License
- Feature Comparison
Master Server License
Target Licenses
- Sitewide License
License Usage and Calculation
Download ER2 License File
View License Details
Upload License File

Subscription License

Enterprise Recon 2.1 software is available as a subscription in three editions - Enterprise Recon PCI, Enterprise Recon PII and Enterprise Recon NOW. Each licensing option offers access to certain features and services in ER 2.1, as described in the Feature Comparison table below.

Feature Comparison

Key Features / Capability
Built-in PCI Data Types	✓	✓	✓
Full Suite of Built-in Data Types		✓	✓
Custom Data Types		✓	✓
OCR & Audio Scanning	✓	✓	✓
All Target Types	✓	✓	✓
Remediation	✓	✓	✓ ¹
Basic Reporting	✓	✓
API Framework		✓
Access Control Lists	✓	✓	✓
Notification & Alerts	✓	✓	✓

¹ Remediation is only supported for Windows desktop and macOS workstation Targets.

Master Server License

For more information, see our End User License Agreement.

Target Licenses

ER 2.1 supports the Sitewide licensing model.

For information on the legacy licensing model, see ER 2.0.31: Target Licenses.

Sitewide License

A Sitewide License specifies the maximum data volume that can be scanned cumulatively across all Targets per ER2 instance. This license model permits an unlimited number of Targets to be scanned with ER2 and applies to all Targets.

The total Sitewide License data usage is calculated as the sum of scanned data across all Targets. See License Usage and Calculation for more information.

License Usage and Calculation

License Assignment

Adding Targets in the Web Console or via the API does not consume licenses or data allowance; data usage is calculated only after a scan has completed successfully.

Data Usage

Data usage is the maximum scanned data volume on a Target or Target location, and is based on the physical size of data on disk. This applies to all Target types and file formats. A detailed log of data usage across all ER2 Targets can be obtained from the Data Allowance Usage section in the System > License Details page.

The size on disk for the archive file "My-Data.zip" is 5000 bytes, while the size of the uncompressed content is 7000 bytes. When "My-Data.zip" is scanned, the data usage count is 5000 bytes.

Data usage will only count towards the data allowance limit for successfully scanned locations. Erroneous locations (e.g. inaccessible locations) do not contribute to the data allowance limit. See Data Allowance Limit for more information.

ER2 calculates the physical size of data on disk using the decimal (base-10) system, where 1 MB = 1,000,000 bytes, 1 GB = 1,000,000,000 bytes, and so forth. This may result in a discrepancy when compared with the data / file size reported by operating systems that use the binary (base-2) system. For example, 1,000,000 bytes would be reported as 1 MB data usage in ER2, and be displayed as 0.9537 MB in base-2 operating systems.

Data Usage Calculation

The total data usage for a Target is defined as the peak scanned data volume for the Target, and is obtained by adding the total data usage for each scan root path within a Target. Scanning a sub-location that is contained wholly within a scan root path does not consume additional data allowance.

Take for example the following directory structure in D:\ drive on a Windows desktop:

Windows desktop (host name: My-Windows-Machine) +-- D:\ (data size: 5 GB) +-- D:\FolderA (data size: 3 GB) +-- D:\FolderA\FolderA-1 (data size: 2 GB) +-- D:\FolderA\FolderA-2 (data size: 1 GB) +-- D:\FolderB (data size: 1 GB) +-- D:\FolderC (data size: 1 GB)

"My-Windows-Machine" is added as a new Target in ER2 and the following scans are executed on the Target.

#	Scanned Locations	Scan Root Path	Total Data Usage	Comments
1	D:\FolderA	D:\FolderA	3 GB	-
2	D:\FolderA\FolderA-1	D:\FolderA	3 GB	The scan root path and total data usage is unchanged as D:\FolderA\FolderA-1 is a sub-location that is contained wholly within D:\FolderA.
3	D:\FolderA D:\FolderB	D:\FolderA D:\FolderB	4 GB	D:\FolderA and D:\FolderB are two distinct scan root paths and the total data usage is the sum of data usage for D:\FolderA and D:\FolderB.
4	D:\	D:\	5 GB	The new scan root path is D:\ as all previously scanned locations are contained wholly within D:\ drive. The total data usage is now 5 GB as additional data is scanned in the D:\FolderC.

Re-scans of the same locations and data do not count towards additional data usage.

You can view a detailed log of data usage in the Data Allowance Usage section of the System > License Details page.

Data Allowance Limit

Each Target licensing model specifies the maximum data volume that can be scanned across all applicable Targets. This is also known as the data allowance limit.

For Sitewide Licenses, all scanned Targets consume data from the Sitewide License data allowance limit.

For example, a scan is completed successfully for the following Targets:

Target	Data Size (GB)
1 MySQL database	4
1 SharePoint Server	8
1 Google Mail account	1
1 Dropbox Personal cloud storage account	1

A total of 14 GB data is consumed from the Sitewide License data allowance limit.

Exceeding License Limits

The following scenarios will cause ER2 license limits to be exceeded:

Scenario	Impacted Licensing Model
Scanned data volume exceeds the data allowance limit available for the corresponding license.	Sitewide License

When the license limit has just been exceeded:

Scan results for the scan that caused the license limit to be exceeded will be processed and available for viewing.
All ongoing scans will be completed but scan results are added to a backlog and will not be processed.

Once the license limit is exceeded, ER2 will operate in reduced-functionality state as below:

Scans that were scheduled prior to exceeding the license limit will continue to be executed. However, scan results are added to a backlog and will not be processed until a new, valid license is uploaded to ER2.
See Processing Blocked for more information.
Users are able to set up and schedule new scans but scan results are added to a backlog and will not be processed.
Users are able to view and download existing compliance reports but reports will include a watermark to reflect the exceeded license limit state.
Users are able to view match results for all scans that were processed before or when ER2 license limit was exceeded.
All remediation actions will be disabled.

The ER2 reduced-functionality state applies to the whole system regardless of the Target that caused the license limit to be exceeded.

User A adds a MySQL database and workstation Target to a scan schedule and sets the scan to "Scan Now". The scan for the workstation Target completes first and causes the data allowance license limit to be exceeded. The scan results for the workstation Target will be processed fully. However, results for the MySQL database scan will be blocked from being processed and added to a backlog as the scan completed after the license limit had been exceeded.

ER2 will continue to run in reduced-functionality state until a new, valid license is uploaded to ER2.

The same reduced-functionality behaviour in ER2 applies to expired licenses.

Processing Blocked

When the license limit is exceeded and ER2 operates in reduced-functionality mode, all scheduled scans will continue to be executed according to schedule. However, results for completed scans will be blocked from being processed until a valid license is uploaded.

Indicator

Targets that have unprocessed scan results will be indicated by the "Processing blocked" status in the Targets page.

Notifications and Alerts

You can create a notification policy to receive alerts and/or emails for the Processing Blocked event, which is triggered when ER2 license limit is exceeded and unprocessed scan results are added to the backlog.

See Notification Policy for more information.

Suppress Scheduled Scans

To prevent building up a huge backlog of unprocessed scan results once the ER2 license limit is exceeded, you can stop all scheduled scans from being executed by enabling the Suppress scans setting from the Scans > Schedule Manager.

You can view suppressed scan schedules in the Schedule Manager page by selecting Deactivated Schedules in the Filter by… pane.

Once a new, valid license is assigned to ER2, all scheduled scans will resume starting from the next scheduled date and time.

One-time scans that were scheduled to start during the window when the Suppress scans setting was enabled will not be resumed when a valid license is assigned to ER2. You can view these schedules in the Schedule Manager by selecting Stopped Schedules in the Filter by… pane.

Download ER2 License File

You must download a license file to activate ER2.

Go to Ground Labs Services Portal and log in.
In the Home tab, scroll down to the Enterprise Recon 2 Licenses section.
Find Enterprise Recon 2.1 in the Product column and click Download License.
(Optional) If you have enabled the Services Portal Complex UI, download the ER2 license by going to License > Enterprise Recon 2.1 in the navigation menu at the top of the page.

Do not click on manually assign | download to download your license file. This downloads a general license file which does not work with ER2.

View License Details

You can view the licensee details, get data allowance usage information and manage licensed Targets in ER2 from the System > License Details page in the Web Console.

License Information

The top left of the License Details page displays information on the current ER2 license:
Licensee and expiry date information in the License Details page.

Licensed To: The name of the company or organization that the ER2 license is registered to. This is also the name of the Ground Labs Services Portal account.
Contact: The full name of the primary contact person for the company or organization.
Expires: Date on which the subscription license expires.

License Summary

The License Summary table displays a list of Master Server and Target licenses that are available for this installation of ER2.

Column	Description
Type	Describes the Target license pool.
Total	"x/y" where - x is the consumed data allowance, and - y is the total data allowance available.

Data Allowance Usage

The Data Allowance Usage table provides a detailed log of data allowance usage in ER2. Each record in the table describes the data usage or total scanned data volume for a distinct Target, Target location, or scan root.

Column	Description
License	Data allowance license pool.
Target Name	Licensed Target name.
Target Type	Target Type (e.g. "All local files", "OneDrive Business", "Amazon S3", etc).
Location	Target, Target location, or scan root for which the data usage is calculated.
Data Used	Total amount of data allowance consumed for the corresponding Target, Target location or scan root.

You can display specific data usage records by using the following filter options:

License
Target
Type
Location

To download the Data Allowance Usage log in CSV file format, click Download Data Usage Log.

See Data Usage Calculation for more information.

Upload License File

Expired or expiring licenses must be replaced by uploading a new license file.

To upload a new license file:

On the top right of the License Details page, click + Upload License File.
In the Upload License File dialog box, click Choose File.
In the Open window, locate and select the License File and click Open.
In the Upload License File dialog box, click Upload.

Uploading a new license file replaces the currently active license file in ER2.