Common use of License Metrics Clause in Contracts

License Metrics. If Customer’s Product is licensed by (a) messages per second (“MPS”) as specified in the Order, the MPS use limitation of the license refers to a rolling 24-hour average of messages per second received by the Software whereby “message” means each individual log or system event received by the Product including without limitation flat file, SNMP, SMTP, netflow (j flow and S flow), syslog or other event or system record. Customer may exceed the MPS limitation by up to 10% without additional charge, and Customer will not be charged for a one-time anomalous event that causes a spike in MPS usage above the specified MPS limitation; (b) by network bandwidth (specified in the Order as a bandwidth or bandwidth per second such as 1GB or 1GB/second), the network bandwidth use limitation refers to a rolling 15-minute average of network bandwidth usage per second; (c) “Identity”, an Identity is a unique person or service account. A person-based Identity may have multiple identifiers such as user accounts, email addresses, and phone numbers. A service account is a user account that is created explicitly to provide an authentication context for a computer or set of computers and/or services running on that computer. An Identity license is required for each unique person-based Identity and each unique service account; (d) User, as defined above, is based on Customer’s identity directory of record for its User count at the inception of the Order; or e) a Protected System, as defined above, includes a network attached device generating network traffic. Examples include but are not limited to servers, workstations, infrastructure devices, virtual systems and other equipment that protects and monitors network traffic using analytics and optional response to identify and remediate threats.

License Metrics. If Customer’s Product is licensed by by: (a) messages per second (“MPS”) as specified in the Order, the MPS use limitation of the license refers to a rolling 24-hour average of messages per second received by the Software whereby “message” means each individual log or system event received by the Product including without limitation flat file, SNMP, SMTP, netflow (j flow and S flow), syslog or other event or system record. Customer may exceed the MPS limitation by up to 10% without additional charge, and Customer will not be charged for a one-time anomalous event that causes a spike in MPS usage above the specified MPS limitation; (b) by network bandwidth (specified in the Order as a bandwidth or bandwidth per second such as 1GB or 1GB/second), the network bandwidth use limitation refers to a rolling 15-minute average of network bandwidth usage per second; (c) “Identity”, an Identity is a unique person or service account. A person-person- based Identity may have multiple identifiers such as user accounts, email addresses, and phone numbers. A service account is a user account that is created explicitly to provide an authentication context for a computer or set of computers and/or services running on that computer. An Identity license is required for each unique person-based Identity and each unique service account; (d) User, as defined above, is based on Customer’s Customers identity directory of record for its User count at the inception of the Order; or (e) a Protected System, as defined above, includes a network attached device generating network traffic. Examples include but are not limited to servers, workstations, infrastructure devices, virtual systems and other equipment that protects and monitors network traffic using analytics and optional response to identify and remediate threats.

License Metrics. If Customer’s Product is licensed by (a) messages per second (“MPS”) as specified in the Order, the MPS use limitation of the license refers to a rolling 24-hour average of messages per second received by the Software whereby “message” means each individual log or system event received by the Product including without limitation flat file, SNMP, SMTP, netflow (j flow and S flow), syslog or other event or system record. Customer may exceed the MPS limitation by up to 10% without additional charge, and Customer will not be charged for a one-time anomalous event that causes a spike in MPS usage above the specified MPS limitation; (b) by network bandwidth (specified in the Order as a bandwidth or bandwidth per second such as 1GB or 1GB/second), the network bandwidth use limitation refers to a rolling 15-minute average of network bandwidth usage per second; (c) “Identityc)“Identity”, an Identity is a unique person or service account. A person-person- based Identity may have multiple identifiers such as user accounts, email addresses, and phone numbers. A service account is a user account that is created explicitly to provide an authentication context for a computer or set of computers and/or services running on that computer. An Identity license is required for each unique person-based Identity and each unique service account; (d) User, as defined above, is based on Customer’s identity directory of record for its User count at the inception of the Order; or (e) a A Protected System, as defined above, includes a network attached device generating network traffic. Examples include but are not limited to servers, workstations, infrastructure devices, virtual systems and other equipment that protects and monitors network traffic using analytics and optional response to identify and remediate threats.

License Metrics. If Customer’s Product is licensed by by: (a) messages per second (“MPS”) as specified in the Order, the MPS use limitation of the license refers to a rolling 24-hour average of messages per second received by the Software whereby “message” means each individual log or system event received by the Product including without limitation flat file, SNMP, SMTP, netflow (j flow and S flow), syslog or other event or system record. Customer may exceed the MPS limitation by up to 10% without additional charge, and Customer will not be charged for a one-time anomalous event that causes a spike in MPS usage above the specified MPS limitation; (b) by network bandwidth (specified in the Order as a bandwidth or bandwidth per second such as 1GB or 1GB/second), the network bandwidth use limitation refers to a rolling 15-minute average of network bandwidth usage per second; (c) “Identity”, an Identity is a unique person or service account. A person-based Identity may have multiple identifiers such as user accounts, email addresses, and phone numbers. A service account is a user account that is created explicitly to provide an authentication context for a computer or set of computers and/or services running on that computer. An Identity license is required for each unique person-based Identity and each unique service account; (d) User, as defined above, is based on Customer’s identity directory of record for its User count at the inception of the Order; or (e) a A Protected System, as defined above, includes a network attached device generating network traffic. Examples include but are not limited to servers, workstations, infrastructure devices, virtual systems and other equipment that protects and monitors network traffic using analytics and optional response to identify and remediate threats.

License Metrics. If Customer’s Product is licensed by by: (a) messages per second (“MPS”) as specified in the Order, the MPS use limitation of the license refers to a rolling 24-hour average of messages per second received by the Software whereby “message” means each individual log or system event received by the Product including without limitation flat file, SNMP, SMTP, netflow (j flow and S flow), syslog or other event or system record. Customer may exceed the MPS limitation by up to 10% without additional charge, and Customer will not be charged for a one-time anomalous event that causes a spike in MPS usage above the specified MPS limitation; (b) by network bandwidth (specified in the Order as a bandwidth or bandwidth per second such as 1GB or 1GB/second), the network bandwidth use limitation refers to a rolling 15-minute average of network bandwidth usage per second; (c) “Identity”, an Identity is a unique person or service account. A person-person- based Identity may have multiple identifiers such as user accounts, email addresses, and phone numbers. A service account is a user account that is created explicitly to provide an authentication context for a computer or set of computers and/or services running on that computer. An Identity license is required for each unique person-based Identity and each unique service account; (d) User, as defined above, is based on Customer’s identity directory of record for its User count at the inception of the Order; or (e) a A Protected System, as defined above, includes a network attached device generating network traffic. Examples include but are not limited to servers, workstations, infrastructure devices, virtual systems and other equipment that protects and monitors network traffic using analytics and optional response to identify and remediate threats.

License Metrics. If Customer’s Product is licensed by (a) messages per second (“MPS”) as specified in the Order, the MPS use limitation of the license refers to a rolling 24-hour average of messages per second received by the Software whereby “message” means each individual log or system event received by the Product including without limitation flat file, SNMP, SMTP, netflow (j flow and S flow), syslog or other event or system record. Customer may exceed the MPS limitation by up to 10% without additional charge, and Customer will not be charged for a one-time anomalous event that causes a spike in MPS usage above the specified MPS limitation; (b) by network bandwidth (specified in the Order as a bandwidth or bandwidth per second such as 1GB or 1GB/second), the network bandwidth use limitation refers to a rolling 15-minute average of network bandwidth usage per second; (c) “Identityc)“Identity”, an Identity is a unique person or service account. A person-person- based Identity may have multiple identifiers such as user accounts, email addresses, and phone numbers. A service account is a user account that is created explicitly to provide an authentication context for a computer or set of computers and/or services running on that computer. An Identity license is required for each unique person-based Identity and each unique service account; (d) User, as defined above, is based on Customer’s Customers identity directory of record for its User count at the inception of the Order; or (e) a A Protected System, as defined above, includes a network attached device generating network traffic. Examples include but are not limited to servers, workstations, infrastructure devices, virtual systems and other equipment that protects and monitors network traffic using analytics and optional response to identify and remediate threats.

License Metrics. If Customer’s Product is licensed by (a) messages per second (“MPS”) as specified in the Order, the MPS use limitation of the license refers to a rolling 24-hour average of messages per second received by the Software whereby “message” means each individual log or system event received by the Product including without limitation flat file, SNMP, SMTP, netflow (j flow and S flow), syslog or other event or system record. Customer may exceed the MPS limitation by up to 10% without additional charge, and Customer will not be charged for a one-time anomalous event that causes a spike in MPS usage above the specified MPS limitation; (b) by network bandwidth (specified in the Order as a bandwidth or bandwidth per second such as 1GB or 1GB/second), the network bandwidth use limitation refers to a rolling 15-minute average of network bandwidth usage per second; (c) “Identity”, an Identity is a unique person or service account. A person-person- based Identity may have multiple identifiers such as user accounts, email addresses, and phone numbers. A service account is a user account that is created explicitly to provide an authentication context for a computer or set of computers and/or services running on that computer. An Identity license is required for each unique person-based Identity and each unique service account; (d) User, as defined above, is based on Customer’s Customers identity directory of record for its User count at the inception of the Order; or e) a Protected System, as defined above, includes a network attached device generating network traffic. Examples include but are not limited to servers, workstations, infrastructure devices, virtual systems and other equipment that protects and monitors network traffic using analytics and optional response to identify and remediate threats.

License Metrics. If Customer’s Product is licensed by by: (a) messages per second (“MPS”) as specified in the Order, the MPS use limitation of the license refers to a rolling 24-hour average of messages per second received by the Software whereby “message” means each individual log or system event received by the Product including without limitation flat file, SNMP, SMTP, netflow (j flow and S flow), syslog or other event or system record. Customer may exceed the MPS limitation by up to 10% without additional charge, and Customer will not be charged for a one-time anomalous event that causes a spike in MPS usage above the specified MPS limitation; (b) by network bandwidth (specified in the Order as a bandwidth or bandwidth per second such as 1GB or 1GB/second), the network bandwidth use limitation refers to a rolling 15-minute average of network bandwidth usage per second; (c) “Identity”, an Identity is a unique person or service account. A person-person- based Identity may have multiple identifiers such as user accounts, email addresses, and phone numbers. A service account is a user account that is created explicitly to provide an authentication context for a computer or set of computers and/or services running on that computer. An Identity license is required for each unique person-based Identity and each unique service account; (d) User, as defined above, is based on Customer’s identity directory of record for its User count at the inception of the Order; or (e) a Protected System, as defined above, includes a network attached device generating network traffic. Examples include but are not limited to servers, workstations, infrastructure devices, virtual systems and other equipment that protects and monitors network traffic using analytics and optional response to identify and remediate threats.