Skip to main content

RioRey Licensing

This page gives a basic overview of RioRey licensing requirement for rWeb and RIOS filter devices.

Licensing Models​

There are three types of licenses, each generated and distributed for different use cases. These models are:

  • Perpetual- These licenses unlock core functionality for a device for an unlimited period. Primarily these licenses are issued for devices that have been purchased and fully paid for. Support and upgradability may be refreshed on a periodic basis, but the features defined in the license will work forever once loaded.
  • Temporary- These licenses unlock functionality for a device on a temporary basis. Once the time period expires, certain functions will cease to work. Usually issued for evaluation/demo devices or for trial periods of new features.
  • Subscription- These licenses unlock functionality for a device on a defined schedule. Subscriptions require that your rWeb be able to connect to our validation server (see more below) in order to receive their correct license information. Subscription licenses will refresh themselves on a daily basis unless you cancel your subscription, there is an issue with billing on your account that cannot be resolved, or your rWeb is unable to check in with our validation server. Subscription licenses are primarily intended for virtual devices (rWeb and/or RIOS).

The basic features of perpetual and temporary licenses are identical in most respects (other than expiration dates) and both are covered in the licensing information detailed in the rWeb and RIOS license pages respectively. Subscription licenses require a bit more explanation and will be covered in more detail below.

Subscription Licenses​

For subscription licensing, rWeb is required to check in to our validation server (validation.riorey.com) on a periodic basis. If rWeb is unable to check in for more than 30 sequential days, rWeb will cease being able to manage RIOS devices and the devices will stop filtering attack traffic. rWeb will give warnings if it is unable to connect to the validation server for a prolonged period of time. This warning will be prior to the 30 day mark in order to give time for troubleshooting.

Each successful check-in will extend the valid license period of all subscription devices. These license updates are applied automatically as part of the check-in process, so other than ensuring that rWeb can reach the validation server, no other user actions are required.

Validation Server Communications​

Validation server communications will be an outgoing connection from rWeb over TCP port 443 to validation.riorey.com. rWeb will communicate the serial number and current running version of all connected devices, including itself and any secondary rWeb if clustering is configured. No other information is communicated as part of a check-in.

rWeb will receive back updated licenses for all devices, as well as indicate if any devices have been detected as a duplicate (in case of cloning). Duplicate messages, by themselves, will not prevent the listed devices from functioning, but you may be contacted by Support to resolve these issues.

Once the new licenses are received, rWeb will apply them all automatically to your devices and you can then see the current feature set listed on the various license pages.

Check-ins happen on a daily basis. If you sign up for a new subscription and have confirmed everything with our License department, you can manually sync to get your updated license from the rWeb licensing page.

Director Licenses​

Director uses FastNetMon as a service component. Director instances need to be able to reach the FastNetMon license server at license.fastnetmon.com, and their stats server at stats.fastnetmon.com.