Enterprise Recon 2.1


This section covers the following topics:

Subscription License

Enterprise Recon 2.1 software is available as a subscription in three editions - Enterprise Recon PCI, Enterprise Recon PII and Enterprise Recon NOW. Each licensing option offers access to certain features and services in ER 2.1, as described in the Feature Comparison table below.

Feature Comparison

Key Features / Capability
Built-in PCI Data Types
Full Suite of Built-in Data Types  
Custom Data Types  
OCR & Audio Scanning
All Target Types
Remediation 1
Basic Reporting  
API Framework    
Access Control Lists
Notification & Alerts

1 Remediation is only supported for Windows desktop and macOS workstation Targets.

Master Server License

For more information, see our End User License Agreement.

Target Licenses

ER 2.1 supports the Sitewide licensing model.

For information on the legacy licensing model, see ER 2.0.31: Target Licenses.

Sitewide License

A Sitewide License specifies the maximum data volume that can be scanned cumulatively across all Targets per ER2 instance. This license model permits an unlimited number of Targets to be scanned with ER2 and applies to all Targets.

The total Sitewide License data usage is calculated as the sum of scanned data across all Targets. See License Usage and Calculation for more information.

License Usage and Calculation

License Assignment

Adding Targets in the Web Console or via the API does not consume licenses or data allowance; data usage is calculated only after a scan has completed successfully.

Data Usage

Data usage is the maximum scanned data volume on a Target or Target location, and is based on the physical size of data on disk. This applies to all Target types and file formats. A detailed log of data usage across all ER2 Targets can be obtained from the Data Allowance Usage section in the System > License Details page.

Data usage will only count towards the data allowance limit for successfully scanned locations. Erroneous locations (e.g. inaccessible locations) do not contribute to the data allowance limit. See Data Allowance Limit for more information.

Data Usage Calculation

The total data usage for a Target is defined as the peak scanned data volume for the Target, and is obtained by adding the total data usage for each scan root path within a Target. Scanning a sub-location that is contained wholly within a scan root path does not consume additional data allowance.

Take for example the following directory structure in D:\ drive on a Windows desktop:

Windows desktop (host name: My-Windows-Machine) +-- D:\ (data size: 5 GB) +-- D:\FolderA (data size: 3 GB) +-- D:\FolderA\FolderA-1 (data size: 2 GB) +-- D:\FolderA\FolderA-2 (data size: 1 GB) +-- D:\FolderB (data size: 1 GB) +-- D:\FolderC (data size: 1 GB)

"My-Windows-Machine" is added as a new Target in ER2 and the following scans are executed on the Target.

# Scanned Locations Scan Root Path Total Data Usage Comments
  • D:\FolderA
  • D:\FolderA
3 GB -
  • D:\FolderA\FolderA-1
  • D:\FolderA
3 GB The scan root path and total data usage is unchanged as D:\FolderA\FolderA-1 is a sub-location that is contained wholly within D:\FolderA.
  • D:\FolderA
  • D:\FolderB
  • D:\FolderA
  • D:\FolderB
4 GB D:\FolderA and D:\FolderB are two distinct scan root paths and the total data usage is the sum of data usage for D:\FolderA and D:\FolderB.
  • D:\
  • D:\
5 GB The new scan root path is D:\ as all previously scanned locations are contained wholly within D:\ drive. The total data usage is now 5 GB as additional data is scanned in the D:\FolderC.

Re-scans of the same locations and data do not count towards additional data usage.

You can view a detailed log of data usage in the Data Allowance Usage section of the System > License Details page.

Data Allowance Limit

Each Target licensing model specifies the maximum data volume that can be scanned across all applicable Targets. This is also known as the data allowance limit.

For Sitewide Licenses, all scanned Targets consume data from the Sitewide License data allowance limit.

For example, a scan is completed successfully for the following Targets:

Target Data Size (GB)
1 MySQL database 4
1 SharePoint Server 8
1 Google Mail account 1
1 Dropbox Personal cloud storage account 1

A total of 14 GB data is consumed from the Sitewide License data allowance limit.

Exceeding License Limits

The following scenarios will cause ER2 license limits to be exceeded:

Scenario Impacted Licensing Model
Scanned data volume exceeds the data allowance limit available for the corresponding license.
  • Sitewide License

When the license limit has just been exceeded:

  • Scan results for the scan that caused the license limit to be exceeded will be processed and available for viewing.
  • All ongoing scans will be completed but scan results are added to a backlog and will not be processed.

Once the license limit is exceeded, ER2 will operate in reduced-functionality state as below:

  • Scans that were scheduled prior to exceeding the license limit will continue to be executed. However, scan results are added to a backlog and will not be processed until a new, valid license is uploaded to ER2.
    See Processing Blocked for more information.
  • Users are able to set up and schedule new scans but scan results are added to a backlog and will not be processed.
  • Users are able to view and download existing compliance reports but reports will include a watermark to reflect the exceeded license limit state.
  • Users are able to view match results for all scans that were processed before or when ER2 license limit was exceeded.
  • All remediation actions will be disabled.

The ER2 reduced-functionality state applies to the whole system regardless of the Target that caused the license limit to be exceeded.

ER2 will continue to run in reduced-functionality state until a new, valid license is uploaded to ER2.

Processing Blocked

When the license limit is exceeded and ER2 operates in reduced-functionality mode, all scheduled scans will continue to be executed according to schedule. However, results for completed scans will be blocked from being processed until a valid license is uploaded.


Targets that have unprocessed scan results will be indicated by the "Processing blocked" status in the Targets page.

Notifications and Alerts

You can create a notification policy to receive alerts and/or emails for the Processing Blocked event, which is triggered when ER2 license limit is exceeded and unprocessed scan results are added to the backlog.

See Notification Policy for more information.

Suppress Scheduled Scans

To prevent building up a huge backlog of unprocessed scan results once the ER2 license limit is exceeded, you can stop all scheduled scans from being executed by enabling the Suppress scans setting from the Scans > Schedule Manager.

Once a new, valid license is assigned to ER2, all scheduled scans will resume starting from the next scheduled date and time.

Download ER2 License File

You must download a license file to activate ER2.

  1. Go to Ground Labs Services Portal and log in.
  2. In the Home tab, scroll down to the Enterprise Recon 2 Licenses section.
  3. Find Enterprise Recon 2.1 in the Product column and click Download License.
  4. (Optional) If you have enabled the Services Portal Complex UI, download the ER2 license by going to License > Enterprise Recon 2.1 in the navigation menu at the top of the page.

View License Details

You can view the licensee details, get data allowance usage information and manage licensed Targets in ER2 from the System > License Details page in the Web Console.

License Information

The top left of the License Details page displays information on the current ER2 license:
Licensee and expiry date information in the License Details page.

  • Licensed To: The name of the company or organization that the ER2 license is registered to. This is also the name of the Ground Labs Services Portal account.
  • Contact: The full name of the primary contact person for the company or organization.
  • Expires: Date on which the subscription license expires.

License Summary

The License Summary table displays a list of Master Server and Target licenses that are available for this installation of ER2.

Column Description
Type Describes the Target license pool.
Total "x/y" where
- x is the consumed data allowance, and
- y is the total data allowance available.

Data Allowance Usage

The Data Allowance Usage table provides a detailed log of data allowance usage in ER2. Each record in the table describes the data usage or total scanned data volume for a distinct Target, Target location, or scan root.

Column Description
License Data allowance license pool.
Target Name Licensed Target name.
Target Type Target Type (e.g. "All local files", "OneDrive Business", "Amazon S3", etc).
Location Target, Target location, or scan root for which the data usage is calculated.
Data Used Total amount of data allowance consumed for the corresponding Target, Target location or scan root.

You can display specific data usage records by using the following filter options:

  • License
  • Target
  • Type
  • Location

To download the Data Allowance Usage log in CSV file format, click Download Data Usage Log.

See Data Usage Calculation for more information.

Upload License File

Expired or expiring licenses must be replaced by uploading a new license file.

To upload a new license file:

  1. On the top right of the License Details page, click + Upload License File.
  2. In the Upload License File dialog box, click Choose File.
  3. In the Open window, locate and select the License File and click Open.
  4. In the Upload License File dialog box, click Upload.