Overview
At this level, Sentry operates quietly in the background to establish baseline visibility of your network. When Scout routers come online, Sentry begins collecting and inspecting traffic data from connected devices, building the groundwork for advanced detection and analysis in later maturity stages.
While no configuration is required at this point, understanding what Sentry monitors and how it fits into Scout’s overall protection model helps administrators prepare for the next phase.
What Sentry Does at This Level
- Captures network telemetry for traffic flowing through Scout routers
- Monitors DNS, protocol behavior, and connection patterns for potential anomalies
- Builds a baseline of what “normal” activity looks like in your environment
- Passively detects suspicious signatures using built-in intelligence feeds
All of this happens automatically as part of the Scout platform. Administrators don’t need to enable or tune anything yet.
Visibility for Administrators
Basic insights from Sentry appear in the Dashboard, supporting early awareness of network activity and system health. These may include:
- The number of active incidents visible on the Active Incidents card
- Indicators from the Threats Detected vs Blocked metric
- Summaries of devices communicating externally via the Devices Online card
These data points begin shaping your understanding of how your network behaves day-to-day.
Preparing for Next Steps
Administrators can lay the groundwork for more mature monitoring by:
- Ensuring all routers and peers are consistently connected to Scout’s VPN
- Confirming that DNS traffic is routed through Blackhole for unified visibility
- Reviewing incident notifications to familiarize with reporting format and terminology
These small actions ensure a complete picture once active detection and policy controls are introduced.
Maturity Progress
Completing this stage establishes Level 1 — Foundation 🟢 for Sentry. You now have continuous network visibility and passive detection in place.