Lumu Hardware Appliances (LHA) are purpose-built, high-performance devices engineered to capture network traffic directly from the wire. They support a wide range of network throughput and metadata ingestion scenarios.

Lumu’s standard metadata collection strategy is designed to provide the maximum level of network coverage with the lowest possible friction. In the vast majority of cybersecurity scenarios, our network-based implementation is a powerful and an efficient way to gain complete visibility over your network’s activity.

However, Lumu recognizes that every infrastructure is unique, and there are scenarios where technical conditions require physical alternatives. For these specific cases, we offer the Lumu Hardware Appliances (LHA). They allow you to connect them directly to devices managing large portions of network traffic, enabling the collection of valuable metadata for specific scenarios.

When should you use a LHA?

Keep in mind that using Lumu Hardware appliances does not mean you will get more out of Lumu's detection capabilities; rather, it will allow you to enable detection capabilities in environments where the standard data collection via Virtual Appliances and Collectors is not viable.

LHA's are the recommended solution for:

• Operational Technology (OT) environments where traditional traffic intervention is not possible.
• Legacy infrastructures or devices that do not support network metadata collection via Virtual appliances and Cloud Collectors.
• Workload Protection for specific high network throughput within Datacenters.
• Organizations whose policies or technical preferences require collection via traffic copying (Port Mirror).

Acquisition and provisioning

If your infrastructure requires the specialized capabilities of an LHA, contact our support or sales team. The device is pre-provisioned by Lumu before shipping to ensure seamless integration. You will receive the hardware ready for the final on-site configuration.

For detailed technical specification, refer to LHA Technical Specifications. Our technical teams will work closely with you to find the right appliance for your specific needs and they will assist you during the installation process to ensure everything goes smoothly. 

Reviewing the LHA in the Lumu Portal

You can review the status of your Lumu Hardware Appliance in the Lumu Portal. To do so, login to the Lumu portal and follow the instructions.

1. Go to Collectors > Hardware Appliance.

2. You will see the appliances you currently have set up with their status.

LHA’s can have the following statuses:

• Online: The LHA is configured and receives traffic.
• Offline: The LHA is configured but has not received any traffic in the last 30mins.
• Inactive: The LHA has not been configured and activated in your network yet.

3. Select the LHA you want to review. The Appliance details page provides a comprehensive overview of the device's connectivity status, and collection performance.

• Appliance general information (1): This section displays the identification information of the device and its status.
• Appliance system information (2): This panel provides a snapshot of the device's health and resource utilization.
• Interfaces status (3): This section maps the physical connectivity of the device. It is divided into the 2 types of interfaces, Management interfaces and the Data interfaces. It will display a count of active connections versus total available ports.
  

Reviewing the LHA in the Lumu MSP Portal

You can review the status of your Lumu Hardware Appliance in the Lumu MSP Portal. To do so, login to the portal and follow the instructions.

1. Go to Deployment > Tenants > Hardware Appliance.

2. You will see the appliances you currently have set up with their status.

LHA’s can have the following statuses:

• Online: The LHA is configured and receives traffic.
• Offline: The LHA is configured but has not received any traffic in the last 30mins.
• Inactive: The LHA has not been configured and activated in your network yet.

3. Select the LHA you want to review. The Appliance details page provides a comprehensive overview of the device's connectivity status, and collection performance.

• Appliance general information (1): This section displays the identification information of the device and its status.
• Appliance system information (2): This panel provides a snapshot of the device's health and resource utilization.
• Interfaces status (3): This section maps the physical connectivity of the device. It is divided into the 2 types of interfaces, Management interfaces and the Data interfaces. It will display a count of active connections versus total available ports.

Adding the LHA to a Grouping Rule

You can add the LHA to a Data Grouping Rule using the section located at the bottom of the Appliance Details page.

For more information about the creation of Grouping Rules, refer to Using Grouping Rules with Lumu Collectors.