License Metric Definitions

License Metrics and Definitions


A node is a Tripwire Enterprise object that represents a monitored system (database, directory server, file server or network device) on a network.

  • Directory server node: Represents a physical server or virtual machine that hosts a centrally managed information store that enables users to search for data saved in a variety of locations on a network
  • File server node: Represents a physical server or virtual machine that hosts a file system (software used to organize and store files)
  • Network device node: Represents a physical router, switch, firewall, load balancer or UNIX system



An instance is a physical or virtual object or occurrence. For example:

  • An instance for TE for VMware ESX is measured per ESX Hypervisor Manager
  • A database instance means one database
  • A Microsoft Exchange instance means the installation of Microsoft Exchange on one operating system
  • A virtual appliance instance means the installation of the virtual appliance on a single operating system instance
  • A TIV sensor instance means the installation of TIV sensor capability on a single operating system instance as part of a virtual or physical appliance
  • A TIV management hub instance means the installation of one or more TIV management hubs to aggregate data from multiple TIV consoles



An IP is an internet protocol address. A “Per IP” license means a license based on the number of unique IP addresses scanned per day.

For IP360, an IP license will be used each time the customer scans a specific and active IP for a vulnerability and as long as the customer has access to those results on the VnE Manager. Customers do not consume a license for scanning empty IP space or for discovery scans that do not include vulnerability scanning. License calculation, which is recalculated daily, is determined by counting all the records currently in the persistent host table that were at any time scanned for vulnerabilities and whose networks are not deleted, and then remove any duplicate IP addresses.



A Gigabyte (GB) is a unit of digital information equal to one billion bytes. Tripwire products licensed per GB are based on the amount of data indexed on a daily basis. The order will state the maximum daily indexing volume allowed for a Customer’s license in Gigabytes. Daily indexing volume is measured from midnight to midnight.
For example, a Tripwire Connect license for up to 20 GB allows a Customer to index 0 to 20 GB of data per day.

For example, a Tripwire Connect license for up to 20 GB allows a Customer to index 0 to 20 GB of data per day.



A site is a physical location where the software is used. For example, a plant, factory, substation, or control center.


Data Source:

A data source is a Tripwire Enterprise (TE) console instance from which a Connect instance installed on a different TE console instance is aggregating data.


Industrial Device:

An industrial device is a ruggedized and/or specialized networked component (on a separate network from IT/business networks and systems) that facilitates or controls the automation of an industrial process. Examples of industrial devices are data acquisition controllers, human-machine interfaces (HMIs), programmable logic controllers (PLCs), relays, remote terminal units (RTUs), routers, switches and terminal servers. Industrial devices do not include file, directory or database servers.


Tripwire Industrial Suite:

The Tripwire Industrial Suite includes 1 Tripwire Enterprise for Industrial Devices license, 1 Tripwire LogCenter for Industrial Environments license, and 1 Tripwire App - State Analyzer – Utility license.


Tripwire File Analyzer:

Tripwire File Analyzer is offered on an annual subscription basis per file server node (including file servers, desktops, POS servers, POS end points), and must be purchased for all of the customer’s currently-supported Tripwire Enterprise file server nodes.