Deploying cysense
Hospital network deployment
For healthcare environments, deploy cysense on a dedicated appliance connected to a SPAN/mirror port on each network segment. See the Hospital Deployment Guide for architecture details.
Recommended placement
| Network segment | Interface | Key protocols |
|---|---|---|
| Clinical VLAN | SPAN port on core switch | HL7v2, DICOM, FHIR |
| Medical devices | SPAN port on device switch | DICOM, Modbus |
| Building automation | SPAN port on BMS switch | BACnet |
| IT / DMZ | SPAN port on firewall | HTTP, DNS |
Docker
docker run --rm --net=host --privileged \
cysense:latest \
listen --interface eth0 --format json
The --net=host and --privileged flags are required for raw packet capture.
Platform deployment
When deployed through the Cybrium platform, cysense runs in an isolated container with network capture privileges. The platform handles scheduling, credential injection, and result ingestion automatically.
One-liner install
curl -fsSL https://cybrium.ai/install.sh | bash -s -- cysense