SGBox license is based on Number IPs + Bundle Activated. Each bundle contains different modules. Here the bundle you can choose:
1 SGBox Bundle
| Modules \ Bundle | Access | Basic | Advanced | Premium |
|---|---|---|---|---|
| Access Log | X | X | X | X |
| System Monitoring | X | X | X | |
| Advanced Log Management | X | X | X | |
| Windows Auditor | X | X | X | |
| Event Correlation | X | X | ||
| Threat Intelligence Feeds | X | X | ||
| User Behavior Analytics | X | X | ||
| Vulnerability Scan | O | O | O | O |
| Incident Management | X | X | ||
| SOAR | X |
X = Included O = Optional
2 SGBox Infrastructure
2.1 On-premise
SGBox can be deployed on customer network. The data source send logs directly to SGBox or throught a collector.
2.1 Saas
SGBox can be deployed on MSSP Cloud. The data source send logs to SGBox throught one or more collectors!
