Documentation forSecurity Event Manager

About SEM licensing

Licensing a Security Event Manager deployment is based on two license types:

  • Universal license (SEM). Includes the number of universal nodes. Universal nodes include non-agent devices, such as switches, routers, and firewalls, and systems running either a Windows Server or Unix operating system.
  • Workstation Edition license (SWE). Includes the number of workstation nodes. Workstation nodes include desktop systems that run Windows and the SEM Agent.

For example, a SEM deployment that has SWE250 and SEM30 licenses can add 250 Windows workstation nodes and 30 universal nodes.

Beginning in April 2020, you can choose to use a perpetual license or a subscription-based (term-based) license. Learn more here.