RSA NetWitness Logs And Packets - Arrow

Transcription

RSA NetWitness Logs and PacketsServer, DAC and SAN HW SpecificationsThis document provides the Hardware specifications for RSA Security AnalyticsServers, Direct Attached Capacity (DAC) and Storage Area Network (SAN) options.ServersThe following table provides a summary of the RSA Security Analytics Servers.ComponentDescriptionSecurity Analytics (SA)ServerSecurity Analytics Server is the Web UI,management server and primary user interface.DecoderDecoder captures and stores raw data. Decodersare specific to Logs and Packets. Decoders createmetadata of raw data capture and enriche withsecurity context.ConcentratorConcentrator stores and indexes metadata for fastqueries and retrieval of raw data capture.Hybrid(Decoder / Concentrator)Decoder / Concentrator combination in a singleappliance for branch monitoring. Hybrids arespecific to Logs and Packets.Event Stream Analysis(ESA)ESA is the real-time correlation and analysis engineacross logs, packets, endpoints, and NetFlow.BrokerBroker aggregates data from configuredConcentrators. Brokers facilitate queries across amulti-site deployment of Concentrators andDecoders.ArchiverArchiver provides long term retention andcompression of log data for compliance reporting.Malware Analysis (MA)MA is the automated malware analysis processor.MA analyzes and scores sessions and theembedded files within these sessions by scoringfour categories: Network, Static Analysis,Community and Sandbox.SPECIFICATION SHEET2016

Server SpecificationsSA Server, Decoder, ConcentratorSpecificationSA ServerDecoderConcentratorModelDell PowerEdge R630xlDell PowerEdge R630xlDell PowerEdge R630xlProcessor TypeIntel Xeon E5 -2667v3Intel Xeon E5 - 2667v3Intel Xeon E5 -2667v3Processor SpeedCache# of Cores# of Processors# of Threads3.2 GHz20 MB82163.2 GHz20 MB82163.2 GHz20 MB8216Total Memory128 GB128 GB128 GBInternal DiskControllerExternal DiskControllerSAN Connectivity(HBA)Dell PERC H730Dell PERC H730Dell PERC H730Dell PERC H830Dell PERC H830Dell PERC H830Emulex 2X8Gb FiberEmulex 2X8Gb FiberEmulex 2X8Gb FiberRemote ManagementCardDrivesiDRAC8 EnterpriseiDRAC8 EnterpriseiDRAC8 EnterpriseTotal – 4 Drives2 X 1TB, 2.5” HDD2 X 2TB, 2.5” HDDTotal – 4 Drives2 X 1TB, 2.5” HDD2 X 2TB, 2.5” HDDTotal – 4 Drives2 X 1TB, 2.5” HDD2 X 2TB, 2.5” HDDChassisWeight1U18.4 kg (40.5 lbs)1U18.4 kg (40.5 lbs)1U18.4 kg (40.5 lbs)NIC CardOn Board2 X 10 Gb Copper2 X 10 Gb & 2 X 1GbCopperOn Board2 X 10 Gb Copper2 X 10 Gb & 2 X 1GbCopperOn Board2 X 10 Gb Copper2 X 10 Gb & 2 X 1GbCopperBTU/hrH: 4.28 cm (1.68 in.) xW: 48.23 cm (18.98 in.) xD: 75.51 cm (29.72 in.)1100WRedundant4100 BTU/hr (max)H: 4.28 cm (1.68 in.) xW: 48.23 cm (18.98 in.) xD: 75.51 cm (29.72 in.)1100WRedundant4100 BTU/hr (max)H: 4.28 cm (1.68 in.) xW: 48.23 cm (18.98 in.) xD: 75.51 cm (29.72 in.)1100WRedundant4100 BTU/hr (max)Amps (Spec)1100W / 220VAC 5A1100W / 220VAC 5A1100W / 220VAC 5AActual Amp Draw(Post Startup)Events Per Second(EPS)2.1 Amps2.1 Amps2.1 AmpsN/ALogs – 30K EPSN/APackets – 2 Gbps to 10GbpsAggregate EPS of all LogDecoders Connected 30K EPSAggregate throughput ofall decoders connected 10 Gbps* Other Options AvailableDimensionsPowerThroughput* Other Options Available* Other Options Available*NIC Card options are available for swap with onboard daughter card or add-onSPECIFICATION SHEET2016

Server SpecificationsHybrid, ESA, BrokerSpecificationHybrid(Decoder / Concentrator)ModelDell PowerEdge R730xdDell PowerEdge R630xlDell PowerEdge R630xlProcessor TypeProcessor SpeedCache# of Cores# of Processors# of ThreadsTotal MemoryInternal Disk ControllerIntel Xeon E5 - 2680v32.5 GHz30 MB12224128 GBDell PERC H730Intel Xeon E5 -2680v32.5 GHz30 MB12224256 GBDell PERC H730Intel Xeon E5 -2667v33.2 GHz20 MB8216128 GBDell PERC H730External Disk ControllerDell PERC H830Dell PERC H830Dell PERC H830SAN Connectivity (HBA) –OptionalN/AN/AN/ARemote Management CardiDRAC8 EnterpriseiDRAC8 EnterpriseiDRAC8 EnterpriseDrivesTotal – 14 Drives4 X 1TB, 3.5” HDD8 X 6TB, 3.5” HDD2 X 800GB, 2.5” SSDTotal – 6 Drives2 X 1TB, 2.5” HDD4 X 2TB, 2.5” HDDTotal – 4 Drives2 X 1TB, 2.5” HDD2 X 2TB, 2.5” HDDChassisWeightNIC Card2UOn Board2 X 10 Gb Copper2 X 10 Gb & 2 X 1GbCopper1U18.4 kg (40.5 lbs)On Board2 X 10 Gb Copper2 X 10 Gb & 2 X 1GbCopperBTU/hrH: 8.73 cm (3.44 in.) xW: 44.40 cm (17.49 in.)x D: 68.40 cm (26.92 in.)1100WRedundant4100 BTU/hr (max)H: 4.28 cm (1.68 in.) xW: 48.23 cm (18.98 in.)x D: 75.51 cm (29.72 in.)1100WRedundant4100 BTU/hr (max)18.4 kg (40.5 lbs)On Board2 X 10 Gb Copper2 X 10 Gb & 2 X 1GbCopper* Other Options AvailableH: 4.28 cm (1.68 in.) xW: 48.23 cm (18.98 in.)x D: 75.51 cm (29.72 in.)1100WRedundant4100 BTU/hr (max)Amps (Spec)1100W / 220VAC 5A1100W / 220VAC 5A1100W / 220VAC 5AActual Amp Draw(Post Startup)Events Per Second (EPS)Throughput2.7 Amps2.1 Amps2.1 AmpsLogs – 20K EPSPackets – 1Gbps100K EPSN/AN/AN/A36.5 kg (80.47 lbs)* Other Options AvailableDimensionsPowerEvent Stream Analysis(ESA)* Other Options AvailableBroker1U*NIC Card options are available for swap with onboard daughter card or add-onSPECIFICATION SHEET2016

Server SpecificationsArchiver, Malware AnalysisSpecificationArchiverMalware AnalysisModelDell PowerEdge R630xlDell PowerEdge R630xlProcessor TypeProcessor SpeedCache# of Cores# of Processors# of ThreadsTotal MemoryInternal Disk ControllerIntel Xeon E5 -2667v33.2 GHz20 MB8216128 GBDell PERC H730Intel Xeon E5 -2667v33.2 GHz20 MB8216128 GBDell PERC H730External Disk ControllerDell PERC H830Dell PERC H830SAN Connectivity (HBA) –OptionalN/AN/ARemote Management CardiDRAC8 EnterpriseiDRAC8 EnterpriseDrivesTotal – 4 Drives2 X 1TB, 2.5” HDD2 X 2TB, 2.5” HDDTotal – 4 Drives2 X 1TB, 2.5” HDD2 X 2TB, 2.5” HDD1U1UBTU/hr18.4 kg (40.5 lbs)On Board2 X 10 Gb Copper2 X 10 Gb & 2 X 1GbCopper* Other Options AvailableH: 4.28 cm (1.68 in.) xW: 48.23 cm (18.98 in.)x D: 75.51 cm (29.72 in.)1100WRedundant4100 BTU/hr (max)18.4 kg (40.5 lbs)On Board2 X 10 Gb Copper2 X 10 Gb & 2 X 1GbCopper* Other Options AvailableH: 4.28 cm (1.68 in.) xW: 48.23 cm (18.98 in.)x D: 75.51 cm (29.72 in.)1100WRedundant4100 BTU/hr (max)Amps (Spec)1100W / 220VAC 5A1100W / 220VAC 5AActual Amp Draw(Post Startup)Events Per Second (EPS)Throughput2.1 Amps2.1 AmpsN/AN/AN/AN/AChassisWeightNIC CardDimensionsPower*NIC Card options are available for swap with onboard daughter card or add-onSPECIFICATION SHEET2016

Storage OptionsOverviewThere are several storage options to add additional capacity either through DirectAttached Capacity (DAC) or Storage Area Network (SAN). The following is asummary of the different options for each server type: Hybrid– Supports capability for adding one High Density DACDecoder– Supports up to 8 High Density DACs, one UltraDAC and connectivity toSAN. NOTE: Connectivity to SAN requires Emulex card.Concentrator– Supports up to 8 High Performance DACs as well as connectivity toSAN. NOTE: Connectivity to SAN requires Emulex card.Archiver– Supports up to 8 High Density DACs, one UltraDAC and connectivity toSAN for hot/warm storage. Cold storage supports NFS connectivity toIsilon. NOTE: Connectivity to SAN requires Emulex card.The tables on the next set of pages provide DAC and SAN specifications for eachserver type.SPECIFICATION SHEET2016

DAC SpecificationsDecoder CapacitySpecificationHigh Density(32 TB)High Density(46 TB)Ultra High Density(142 TB)*Ultra High Density(180 TB)*Form Factor3U3U4U4UTotal # of Drives14 1 Hotspare14 1 Hotspare58 2 Hotspare58 2 HotspareStorage Capacity32 TB46 TB142 TB180 TBHDD Size3 TB4 TB3 TB4 TB# of HDDs15156060SSD SizeN/AN/AN/AN/A# of SSDsN/AN/AN/AN/APower Supply235 W Redundant235 W Redundant1130 W Redundant1130 W RedundantAmps (Max at 100 Vac)2.82.91212BTU/hr80080038603860Max WeightDimensions68lbsHeight: 5.25 inchesWidth: 17.5 inchesLength: 14 inches70lbsHeight: 5.25 inchesWidth: 17.5 inchesLength: 14 inches213lbsHeight: 7 inchesWidth: 17.5 inchesLength: 34.5 inches*3rd party racks are not supported; racks need to be purchased from RSASPECIFICATION SHEET2016215lbsHeight: 7 inchesWidth: 17.5 inchesLength: 34.5 inches

DAC SpecificationsConcentrator CapacitySpecificationHigh Performance(12 TB)High Performance(33 TB)Form Factor3U3UTotal # of Drives14 1 Hotspare14 1 HotspareStorage Capacity(raw)12 TB33 TBHDD Size2 TB4 TB# of HDDs89SSD Size200 GB200 GB# of SSDs76Power Supply235 W Redundant235 W RedundantAmps (Max at 100 Vac)2.82.9BTU/hr800800Max Weight67lbs68lbsDimensionsHeight: 5.25 inchesWidth: 17.5 inchesLength: 14 inchesHeight: 5.25 inchesWidth: 17.5 inchesLength: 14 inchesSPECIFICATION SHEET2016

DAC SpecificationsHybrid CapacitySpecificationHigh Density(32 TB)High Density(46 TB)Form Factor3U3UTotal # of Drives14 1 Hotspare14 1 HotspareStorage Capacity32 TB46TBHDD Size3 TB4 TB# of HDDs1515SSD SizeN/AN/A# of SSDsN/AN/APower Supply235 W Redundant235 W RedundantAmps (Max at 100 Vac)2.82.9BTU/hr800800Max WeightDimensions67lbsHeight: 5.25 inchesWidth: 17.5 inchesLength: 14 inches70lbsHeight: 5.25 inchesWidth: 17.5 inchesLength: 14 inchesSPECIFICATION SHEET2016

DAC SpecificationsArchiver CapacitySpecificationHigh Density(32 TB)High Density(46 TB)Ultra High Density(142 TB)*Ultra High Density(180 TB)*Form Factor3U3U4U4UTotal # of Drives14 1 Hotspare14 1 Hotspare58 2 Hotspare58 2 HotspareStorage Capacity32 TB46 TB142 TB180 TBHDD Size3 TB4 TB3 TB4 TB# of HDDs15156060SSD SizeN/AN/AN/AN/A# of SSDsN/AN/AN/AN/APower Supply235 W Redundant235 W Redundant1130 W Redundant1130 W RedundantAmps (Max at 100 Vac)2.82.91212BTU/hr80080038603860Max WeightDimensions68lbsHeight: 5.25 inchesWidth: 17.5 inchesLength: 14 inches70lbsHeight: 5.25 inchesWidth: 17.5 inchesLength: 14 inches213lbsHeight: 7 inchesWidth: 17.5 inchesLength: 34.5 inches*3rd party racks are not supported; racks need to be purchased from RSASPECIFICATION SHEET2016215lbsHeight: 7 inchesWidth: 17.5 inchesLength: 34.5 inches

SAN SpecificationsDecoder, Concentrator and ArchiverSpecificationSAN CapacitySAN CapacitySAN CapacityForm FactorHalf Cabinet (21U)Full Cabinet (42U)2 x Full Cabinet (84U)Total # of Drives4 (min) / 500 (max)4 (min) / 750 (max)4 (min) / 1000 (max)Storage Capacity2000TB (max)3000TB (max)4000TB (max)Max LUNs1100 (pool) / 4096(traditional)2100 (pool) / 4096(traditional)3000 (pool) / 8192(traditional)LUN Pools404060Max LUN Size256TB (pool) / (traditional)256TB (pool) / (traditional)256TB (pool) / (traditional)HDD SizeVNX Specs Page 6VNX Specs Page 6VNX Specs Page 6# of HDDSee Spec SheetSee Spec SheetSee Spec SheetSSD SizeVNX Specs Page 5VNX Specs Page 5VNX Specs Page 5# of SSDsSee Spec SheetSee Spec SheetSee Spec SheetDepends on configurationDepends on configurationDepends on configurationAmps (Max at 100 Vac)Depends on configurationDepends on configurationDepends on configurationBTU / hrDepends on configurationDepends on configurationDepends on configurationWeightDepends on configurationDepends on configurationDepends on configurationDimensionsHeight: 40 inchesWidth: 19 inchesDepth: 36 inchesHeight: 80 inchesWidth: 19 inchesDepth: 36 inchesHeight: 80 inchesWidth: 19 inchesDepth: 36 inchesPower SupplySPECIFICATION SHEET2016

RSA NetWitness Logs and Packets Server, DAC and SAN HW Specifications SPECIFICATION SHEET 2016 This document provides the Hardware specifications for RSA Security Analytics Servers, Direct Attached Capacity (DAC) and Storage Area Network (SAN) options. Servers The following table provides a summary of the RSA Security Analytics Servers.