First things first

If you haven’t already, you’ll need to create an account in the Perch app.

For your network to be able to properly connect with your sensor, you’ll first need to get port mirroring set up. Port mirroring, also known as SPAN (Switch Port Analyzer), sends a copy of all network packets seen on one port (or an entire VLAN) to another port, where the packets can be analyzed through a Perch sensor and routed to the Perch cloud.

These articles will help you get mirroring set up:

Physical only:

Virtual only:

Cloud only:

Now that port mirroring is out of the way, you’re ready to install your sensor. Let’s determine what sensor type you have – Physical, Virtual, or Cloud. You might have a combination of sensors, so you’ll want to check out each article that pertains to your sensor type.

With Perchybana we can work alongside you, you can go in and get your hands a little dirty and see the data that we see, or any combination of the two. We make the data transparent, giving you full control over your security posture.

Adding integrations expands Perch’s threat analysis to include the log data of your other tools and services. It lets you aggregate your data, giving you a clear view of your environment. We have a variety of integrations and are continuing to add more to our arsenal. Find all of our currently available integrations here:

Once your integrations are set up, you can go to the Perch Marketplace to start gathering essential content. Without setting up the Perch Marketplace, Perch will only have the capability to pull in logs and cannot generate additional content. You can read about setting up the Perch Marketplace and more here: