LANGuardian Installation Guide

Installation Overview

LANGuardian is a standalone software system that requires no operating system licenses. It operates unobtrusively by capturing and analyzing the traffic flowing through your network switch usually via a SPAN or port mirror. You can choose from three installation options:

  1. Install LANGuardian on a dedicated physical machine.
  2. Deploy as a virtual machine on a VMware ESX environment.
  3. Deploy on your laptop or PC using VMWARE Player or Virtualbox.

  • Dedicated Physical Machine

  • VMware ESX environment

  • Laptop or PC with VMWARE Player

Typical requirements for a physical machine are a 2 GHz processor, 4 GB RAM, and 250 GB of disk space.

When installed on a dedicated physical PC or server, LANGuardian runs on industry standard hardware. The only special requirement is that the PC or server must have two NICs (network interface cards) – one to collect the traffic data, and one to provide access to the LANGuardian user interface. If you want to connect additional sensors to your network, you will need additional NICs on your PC or server.

Installation diagram

The diagram below shows LANGuardian in a typical network setup consisting of PCs, laptops, servers, a core switch, and a firewalled Internet connection. LANGuardian deploys as a bare-metal installation onto dedicated hardware that is connected directly to the core switch.
NetFort LANGuardian


In this network, the core switch port assignments are as follows (click the diagram to see a close-up of the switch ports):

Port number Description
4                    User LAN
5                    File server
6                    SQL Server database server
7                    Application server
8                    Intranet server
10                  Management interface
12                  Monitoring (SPAN) port
Uplink             Connected to Internet via firewall

To monitor this network, the following steps are necessary:

  1. On your network switch:
    1. Configure port 12 as a monitoring port.
    2. Configure ports 4, 5, 6, 7, 8, and the uplink port as the source ports to be monitored.
  2. Connect a network cable from the monitoring port on the switch (port 12) to one of the network interface cards on the LANGuardian server.
  3. Connect a network cable from an unused port on the switch (port 10) to the other network interface card on the LANGuardian server.
  4. In the LANGuardian user interface:
    1. In the Administration menu, click Sensors.
    2. In the Sensors menu, click Add New Sensor.
    3. Choose a sensor type and follow the instructions.

Video install guide

When you install LANGuardian in a VMware ESX environment, it can monitor traffic on the internal virtual network, as well as traffic on the physical network. To monitor virtual network traffic, the virtual switch you are monitoring must be configured to operate in promiscuous mode. To monitor physical network traffic with a LANGuardian virtual machine, you need a dedicated virtual switch that is associated with its own NIC.

LANGuardian works on the same principle in virtual networks as in physical networks. A VMware ESX environment incorporates a virtual network switch, which is the virtual equivalent of the core switch in a physical network. The virtual network switch supports promiscuous mode, a setting that enables virtual adapters to see all traffic flowing through the switch and essentially providing the same functionality as a SPAN or monitoring port on a physical network. This makes it possible for the LANGuardian virtual appliance to monitor and report on all network traffic flowing through the virtual network.

Installation Diagram

The illustration below shows a typical virtual network setup consisting of file, application, and database servers connected to a virtual switch. When connected to the same virtual switch as the servers, the LANGuardian virtual appliance can monitor all network activity on the servers.

In this network, LANGuardian is installed on a virtual server that is connected to a virtual switch. When the switch is configured in promiscuous mode, LANGuardian can capture all traffic flowing through the switch.
NetFort LANGuardian

Monitoring physical network traffic with a LANGuardian virtual machine

As well as monitoring traffic on your virtual network, a LANGuardian virtual appliance can monitor network traffic on your physical network. In this configuration, you must configure an additional sensor in the LANGuardian user interface and connect this sensor to a separate virtual switch, which in turn must be connected to the physical network. The diagram below illustrates this configuration.

NetFort LANGuardian

Video install guide

NetFort LANGuardian Install Video

You can install LANGuardian as a virtual machine on your PC or laptop. This will allow you to see your own traffic or if you connect your laptop to a SPAN or mirror port you will be able to troubleshoot other network problems

NetFort LANGuardian Install Video

Find out more

If you have any questions about how LANGuardian can meet your requirements, please contact us. If you would like to see LANGuardian in action, please try our online demo system or download a free 30-day trial to try it on your own network with your own data.

Contact Us


Telnet Networks Inc.
100 Strowger Blvd, Suite 118, Brockville, ON, K6V 5J9, Canada


(800) 561-4019



For More Information about Telnet Networks, our products, or our services, or to request a quote please feel free to contact us directly.