RSA NetWitness Logs and Packets

Server, DAC, and SAN Hardware Specifications

This document provides the Hardware specifications for RSA NetWitness
Suite servers and Direct Attached Capacity (DAC).

Servers
The following table provides a summary of the RSA NetWitness Suite
Servers.

Component Description

Security Analytics Server Security Analytics Server is the Web UI, management
server and primary user interface.

Decoder Decoder captures and stores raw data. Decoders

are specific to Logs and Packets. Creates
metadata of raw data capture and enriches with
security context.
Concentrator Concentrator stores and indexes metadata for
fast queries and retrieval of raw data capture.
Hybrid Decoder / Concentrator combination in a single
(Decoder / Concentrator) appliance for branch monitoring. Hybrids are
specific to both Logs and Packets.
Event Stream Analysis ESA is a real-time correlation and analysis engine
(ESA) across logs, packets, endpoints, and NetFlow.
Broker Broker aggregates data from configured
Concentrators. Brokers facilitate queries across
multiple Concentrators and Decoders to improve
performance.
Archiver Archiver provides long-term retention and
compression of log data for compliance reporting.
Malware Analysis (MA) MA is the automated malware analysis processor. MA
analyzes and scores sessions and the embedded files
within these sessions, by scoring four categories:
Network, Static Analysis, Community and Sandbox.

RSA NETWITNESS SUITE

SPECIFICATION SHEET 2017
 Server Specifications
Security Analytics Server, Decoder, Concentrator
Specification Security A nalytics Decoder Concentrator
Server

Mode l De ll Powe rEdge R630xl De ll Powe rEdge R630xl De ll Powe rEdge R630xl

Proce ssor Type Inte l Xe on E5 -2667v3 Inte l Xe on E5 - 2667v3 Inte l Xe on E5 -2667v3

Proce ssor Speed 3.2 GHz 3.2 GHz 3.2 GHz

C ache 20 MB 20 MB 20 MB
# of C ores 8 8 8
# of Processors 2 2 2
# of Thre ads 16 16 16
Total Memory 128 GB 128 GB 128 GB

Inte rnal Disk De ll PER C H730P De ll PER C H730P De ll PER C H730P

C ontro ller
Ex te rnal Disk De ll PER C H830 De ll PER C H830 De ll PER C H830
C ontroller
SAN C onnectivity Em ule x 2X8Gb Fiber Em ule x 2X8Gb Fiber Em ule x 2X8Gb Fiber
(HBA)
(optional)
R e m ote iDR AC 8 Enterprise iDR AC 8 Enterprise iDR AC 8 Enterprise
Management Card
Drive s Total – 4 Drives Total – 4 Drives Total – 4 Drives
2 X 1TB, 2.5” HDD 2 X 1TB, 2.5” HDD 2 X 1TB, 2.5” HDD
2 X 2TB, 2.5” HDD 2 X 2TB, 2.5” HDD 2 X 2TB, 2.5” HDD
Drive s Speed 7.2k R PM 7.2k R PM 7.2k R PM

C hassis 1U 1U 1U
W e ight 18.4 k g (40.5 lbs) 18.4 k g (40.5 lbs) 18.4 k g (40.5 lbs)

NIC C ard O n Board O n Board O n Board

2 X 10 Gb & 2 X 1Gb 2 X 10 Gb & 2 X 1Gb C opper 2 X 10 Gb & 2 X 1Gb
C opper * O the r O ptions Available C opper
* O the r O ptions Available * O the r O ptions Available
Dim e nsions H: 4.28 cm (1.68 in.) x H: 4.28 cm (1.68 in.) x H: 4.28 cm (1.68 in.) x
W : 48.23 cm (18.98 in.) x W : 48.23 cm (18.98 in.) x W : 48.23 cm (18.98 in.) x
D: 75.51 cm (29.72 in.) D: 75.51 cm (29.72 in.) D: 75.51 cm (29.72 in.)
Powe r 1100W 1100W 1100W
R e dundant R e dundant R e dundant
Powe r C ords W all W all W all

BTU/hr 4100 BTU/hr (max) 4100 BTU/hr (max) 4100 BTU/hr (max)

Am ps (Spec) 1100W / 220VAC = 5A 1100W / 220VAC = 5A 1100W / 220VAC = 5A

Actual Am p Draw 2.1 Amps 2.1 Amps 2.1 Amps

(Post Startup)
Eve nts Per Se cond N/A Logs – 30K EPS Aggre gate EPS of all Log
(EPS) De coders Connected <30K
EPS
Throughput N/A Pack ets – 2 Gbps to 10 Gbps Aggre gate throughput of all
de coders connected < 10
Gbps
*NIC Card options (e.g. 2x10Gb Copper) are available for swap with onboard daughter card or add-on

RSA NETWITNESS SUITE

SPECIFICATION SHEET 2017
 Server Specifications
Hybrid, ESA, and Broker
Spe cification Hybrid Eve nt Stre am Analysis Brok e r
(De coder / Concentrator) (ESA)

Mode l De ll Powe rEdge R730xd De ll Powe rEdge R630xl De ll Powe rEdge R630xl
Proce ssor Type Inte l Xe on E5 - 2680v3 Inte l Xe on E5 -2680v3 Inte l Xe on E5 -2667v3
Proce ssor Speed 2.5 GHz 2.5 GHz 3.2 GHz
C ache 30 MB 30 MB 20 MB
# of C ores 12 12 8
# of Processors 2 2 2
# of Thre ads 24 24 16
Total Memory 128 GB 256 GB 128 GB
Inte rnal Disk De ll PER C H730P De ll PER C H730P De ll PER C H730P
C ontroller
Ex te rnal Disk De ll PER C H830 De ll PER C H830 De ll PER C H830
C ontroller

SAN C onnectivity N/A N/A N/A

(HBA) – O ptional

R e m ote iDR AC 8 Enterprise iDR AC 8 Enterprise iDR AC 8 Enterprise

Management Card

Drive s Total – 14 Drives Total – 6 Drives Total – 4 Drives

4 X 1TB, 3.5” HDD 2 X 1TB, 2.5” HDD 2 X 1TB, 2.5” HDD
8 X 6TB, 3.5” HDD 4 X 2TB, 2.5” HDD 2 X 2TB, 2.5” HDD
2 X 800GB, 2.5” SSD
Drive s Speed 7.2k R PM 7.2k R PM 7.2k R PM

1U
C hassis 2U 1U
W e ight 36.5 k g (80.47 lbs) 18.4 k g (40.5 lbs) 18.4 k g (40.5 lbs)

NIC C ard O n Board O n Board O n Board

2 X 10 Gb & 2 X 1Gb 2 X 10 Gb & 2 X 1Gb 2 X 10 Gb & 2 X 1Gb
C opper C opper C opper
* O ther O ptions Available * O ther O ptions Available * O the r O ptions Available
Dim e nsions H: 8.73 cm (3.44 in.) x H: 4.28 cm (1.68 in.) x H: 4.28 cm (1.68 in.) x
W : 44.40 cm (17.49 in.) x W : 48.23 cm (18.98 in.) x W : 48.23 cm (18.98 in.) x
D: 68.40 cm (26.92 in.) D: 75.51 cm (29.72 in.) D: 75.51 cm (29.72 in.)
Powe r 1100W 1100W 1100W
R e dundant R e dundant R e dundant
Powe r C ords W all W all W all

BTU/hr 4100 BTU/hr (max) 4100 BTU/hr (max) 4100 BTU/hr (max)

Am ps (Spec) 1100W / 220VAC = 5A 1100W / 220VAC = 5A 1100W / 220VAC = 5A

Actual Am p Draw 2.7 Am ps 2.1 Am ps 2.1 Amps

(Post Startup)
Eve nts Per Se cond Logs – 20K EPS 100K EPS
(EPS)
Throughput Pack ets – 1Gbps N/A

* NIC Card options (e.g. 2x10Gb Copper) are available for swap with onboard daughter card or add-on

RSA NETWITNESS SUITE

SPECIFICATION SHEET 2017
 Server Specifications
Archiver and Malware Analysis
Specification A rchiver Malware A nalysis

Mode l De ll Powe rEdge R630xl De ll Powe rEdge R630xl

Proce ssor Type Inte l Xe on E5 -2667v3 Inte l Xe on E5 - 2667v3

Proce ssor Speed 3.2 GHz 3.2 GHz

C ache 20 MB 20 MB
# of C ores 8 8
# of Processors 2 2
# of Thre ads 16 16
Total Memory 128 GB 128 GB

Inte rnal Disk De ll PER C H730P De ll PER C H730P

C ontroller

Ex te rnal Disk De ll PER C H830 De ll PER C H830

C ontroller
SAN C onnectivity Em ule x 2X8Gb Fiber Em ule x 2X8Gb Fiber
(HBA)
(optional)

R e m ote iDR AC 8 Enterprise iDR AC 8 Enterprise

Management Card

Drive s Total – 4 Drives Total – 4 Drives

2 X 1TB, 2.5” HDD 2 X 1TB, 2.5” HDD
2 X 2TB, 2.5” HDD 2 X 2TB, 2.5” HDD
Drive s Speed 7.2k R PM 7.2k R PM

C hassis 1U 1U
W e ight 18.4 k g (40.5 lbs) 18.4 k g (40.5 lbs)

NIC C ard O n Board O n Board

2 X 10 Gb & 2 X 1Gb 2 X 10 Gb & 2 X 1Gb
C opper C opper
* O the r O ptions Available * O the r O ptions Available
Dim e nsions H: 4.28 cm (1.68 in.) x H: 4.28 cm (1.68 in.) x
W : 48.23 cm (18.98 in.) x W : 48.23 cm (18.98 in.) x
D: 75.51 cm (29.72 in.) D: 75.51 cm (29.72 in.)
Powe r 1100W 1100W
R e dundant R e dundant
Powe r C ords W all W all

BTU/hr 4100 BTU/hr (max) 4100 BTU/hr (max)

Am ps (Spec) 1100W / 220VAC = 5A 1100W / 220VAC = 5A

Actual Am p Draw 2.1 Amps 2.1 Amps

(Post Startup)
Eve nts Per Se cond N/A N/A
(EPS)
Throughput N/A N/A

* NIC Card options (e.g. 2x10Gb Copper) are available for swap with onboard daughter card or add-on

RSA NETWITNESS SUITE

SPECIFICATION SHEET 2017
 Storage Options
Overview
There are several options to add additional capacity either through Direct
Attached Capacity (DAC) or Storage Area Network (SAN). The following is a
summary of the different options for each server type:

• Hybrid
– Supports capability for adding one High Density DAC
• Decoder
– Supports up to 8 High Density DACs, one UltraDAC and
connectivity to SAN.
NOTE: Connectivity to SAN requires Emulex card.
• Concentrator
– Supports up to 8 High Performance DACs as well as connectivity
to SAN.
NOTE: Connectivity to SAN requires Emulex card.
• Archiver
– Supports up to 8 High Density DACs, one UltraDAC and
connectivity to SAN for hot/warm storage. Cold storage supports
NFS connectivity to Isilon.
NOTE: Connectivity to SAN requires Emulex card.

The tables on the next set of pages provide DAC specifications for each
server type.

RSA NETWITNESS SUITE

SPECIFICATION SHEET 2017
 DAC Specifications
Decoder Capacity
Specification High Density High Density Ultra High Density Ultra High Density
(32 TB) (46 TB) (142 TB)* (180 TB)*

Form Factor 3U 3U 4U 4U

Total # of Drives 14 + 1 Hotspare 14 + 1 Hotspare 58 + 2 Hotspare 58 + 2 Hotspare

Storage C apacity 32 TB 46 TB 142 TB 180 TB

HDD Size 3 TB 4 TB 3 TB 4 TB

# of HDDs 15 15 60 60

SSD Size N/A N/A N/A N/A

# of SSDs N/A N/A N/A N/A

Powe r Supply 235 W R edundant 235 W R edundant 1130 W Redundant 1130 W Redundant

Am ps (Max at 100 2.8 2.9 12 12

Vac)

BTU/hr 800 800 3860 3860

Max W eight 68lbs 70lbs 213lbs 215lbs

Dim e nsions He ight: 5.25 inches He ight: 5.25 inches He ight: 7 inches He ight: 7 inches
W idth: 17.5 inches W idth: 17.5 inches W idth: 17.5 inches W idth: 17.5 inches
Le ngth: 14 inches Le ngth: 14 inches Le ngth: 34.5 inches Le ngth: 34.5 inches
*3rd party racks are not supported; racks need to be purchased from RSA

Concentrator Capacity
Specification High Performance High Performance
(12 TB) (33 TB)

Form Factor 3U 3U

Total # of Drives 14 + 1 Hotspare 14 + 1 Hotspare

Storage C apacity(raw) 12 TB 33 TB

HDD Size 2 TB 4 TB

# of HDDs 8 9

SSD Size 200 GB 200 GB

# of SSDs 7 6

Powe r Supply 235 W R edundant 235 W R edundant

Am ps (Max at 100 Vac) 2.8 2.9

BTU/hr 800 800

Max W eight 67lbs 68lbs

Dim e nsions He ight: 5.25 inches He ight: 5.25 inches

W idth: 17.5 inches W idth: 17.5 inches
Le ngth: 14 inches Le ngth: 14 inches

RSA NETWITNESS SUITE

SPECIFICATION SHEET 2017
 DAC Specifications
Hybrid Capacity
Specification High Density High Density
(32 TB) (46 TB)

Form Factor 3U 3U

Total # of Drives 14 + 1 Hotspare 14 + 1 Hotspare

Storage C apacity 32 TB 46TB

HDD Size 3 TB 4 TB

# of HDDs 15 15

SSD Size N/A N/A

# of SSDs N/A N/A

Powe r Supply 235 W R edundant 235 W R edundant

Am ps (Max at 100 Vac) 2.8 2.9

BTU/hr 800 800

Max W eight 67lbs 70lbs

Dim e nsions He ight: 5.25 inches He ight: 5.25 inches
W idth: 17.5 inches W idth: 17.5 inches
Le ngth: 14 inches Le ngth: 14 inches

Archiver Capacity
Specification High Density High Density Ultra High Density Ultra High Density
(32 TB) (46 TB) (142 TB)* (180 TB)*

Form Factor 3U 3U 4U 4U

Total # of Drives 14 + 1 Hotspare 14 + 1 Hotspare 58 + 2 Hotspare 58 + 2 Hotspare

Storage C apacity 32 TB 46 TB 142 TB 180 TB

HDD Size 3 TB 4 TB 3 TB 4 TB

# of HDDs 15 15 60 60

SSD Size N/A N/A N/A N/A

# of SSDs N/A N/A N/A N/A

Powe r Supply 235 W R edundant 235 W R edundant 1130 W Redundant 1130 W Redundant

Am ps (Max at 100 2.8 2.9 12 12

Vac)

BTU/hr 800 800 3860 3860

Max W eight 68lbs 70lbs 213lbs 215lbs

Dim e nsions He ight: 5.25 inches He ight: 5.25 inches He ight: 7 inches He ight: 7 inches
W idth: 17.5 inches W idth: 17.5 inches W idth: 17.5 inches W idth: 17.5 inches
Le ngth: 14 inches Le ngth: 14 inches Le ngth: 34.5 inches Le ngth: 34.5 inches

*3rd party racks are not supported; racks need to be purchased from RSA

RSA NETWITNESS SUITE

SPECIFICATION SHEET 2017
 SAN Specifications
Decoder, Concentrator, and Archiver Capacity
Specification SA N Capacity (5600) SA N Capacity (5800) SA N Capacity (7600)

Total # of Drives 4 (m in) / 500 (max) 4 (m in) / 750 (max) 4 (m in) / 1000 (max)

Storage C apacity 2000TB (max) 3000TB (max) 4000TB (max)

Max LUNs 1100 (pool) / 4096 2100 (pool) / 4096 3000 (pool) / 8192
(traditional) (traditional) (traditional)

LUN Pools 40 40 60
Max LUN Size 256TB (pool) / 256TB (pool) / 256TB (pool) /
∞ (traditional) ∞ (traditional) ∞ (traditional)

HDD Size VNX Spe cs Page 6 VNX Spe cs Page 6 VNX Spe cs Page 6

# of HDD Se e Spec Sheet Se e Spec Sheet Se e Spec Sheet

SSD Size VNX Spe cs Page 5 VNX Spe cs Page 5 VNX Spe cs Page 5

# of SSDs Se e Spec Sheet Se e Spec Sheet Se e Spec Sheet

R ack Mounted Units Min: 6U Min: 6U Min: 6U

(pe r VNX) Max : 103U Max : 153U Max : 203U
De pe nds on configuration De pe nds on configuration De pe nds on configuration
Powe r Supply
Am ps (Max at 100 Vac) De pe nds on configuration De pe nds on configuration De pe nds on configuration

BTU / hr De pe nds on configuration De pe nds on configuration De pe nds on configuration

W e ight De pe nds on configuration De pe nds on configuration De pe nds on configuration

Dim e nsions He ight: 40 inches He ight: 80 inches He ight: 80 inches

W idth: 19 inches W idth: 19 inches W idth: 19 inches
De pth: 36 inches De pth: 36 inches De pth: 36 inches

RSA NETWITNESS SUITE

SPECIFICATION SHEET 2017