PRODUCT SPECIFICATIONS
| Appliance datasheet | Nominal capacity* |
Operational mode |
Monitoring interface |
Management interface |
External connector |
Power | Size & weight |
| AP 200 | 2 Gbps | Out of band—fed by tap, span, or packet broker | Four SFP interfaces. Support for copper and optical modules at 100M & 1G | One gigE copper ethernet port (1000mbps only) | VGA, USB | 120/240 VAC 50/60 Hz single PSU. ~83W usage when idle and 141W usage at load. | 1U half-depth rackmount (19 x 14.5 x 1.75 inches), 22 lbs |
| AP 1001 | 10 Gbps | Out of band—fed by tap, span, or packet broker | Four 1G/10G SFP/SFP+ modules. Support for copper and optical modules at 1G and 10G | One 10/100/1000 copper ethernet port Two 1/10G SFP+ ports |
VGA, USB | 120/240 VAC 50/60 Hz redundant dual PSUs. 700W at 110V or 750W at 220V. ~180W usage when idle and 290W usage at load | 1U rackmount, (19 x 25.6 x 1.75 inches), 40 lbs |
| AP 1100 | 20 Gbps | Out of band—fed by tap, span, or packet broker | Four 1G/10G SFP/SFP+ modules. Support for copper and optical modules at 1G and/or 10G | 2 x 1G ports 4 x 10G SFP+ ports |
VGA, USB | 100-240 VAC 50/60 Hz redundant dual PSUs. ~270W usage when idle and 439W usage at load | 1U rackmount, (19 x 31.85 x 1.7 inches), 48 lbs |
| AP 3000 | 25 Gbps | Out of band—fed by tap, span, or packet broker | Up to 8 SFP/SFP+ or 2 QSFP+ modules. Support for copper and optical modules at 1G and 10G or 40G | One 10/100/1000 copper ethernet port Two 1/10G SFP+ ports |
VGA, USB | 120/240 VAC 50/60 Hz redundant dual PSUs. ~161W usage when idle and 445W usage at load | 1U rackmount (19 x 25.6 x 1.75 inches), 51 lbs |
| AP 3100 | 35 Gbps | Out of band—fed by tap, span, or packet broker | Up to 8 SFP/SFP+ or 2 QSFP+ modules. Support for copper and optical modules at 1G and 10G or 40G | 2 x 1G ports 4 x 10G SFP+ ports |
VGA, USB | 100-240 VAC 50/60 Hz redundant dual PSUs. ~501W usage when idle and 697W usage at load | 1U rackmount, (19 x 31.85 x 1.7 inches), 48 lbs |
| AP 5000 | 100 Gbps | Out of band—fed by tap, span, or packet broker | 2 QSFP28 modules. Support for optical modules at 8 x 10G, 2x 40G or 2 x 100G |
2 x 1 Gbe LOM port 4 x 10 Gbe SFP28 ports |
VGA, USB | 100-240 VAC 50/60 Hz redundant dual PSUs. ~443W usage when idle and 852W usage at load | 1U rackmount ( 17.1 x 29 x 1.75 inches), 47.4 lbs |
| AP 5002 | 100 Gbps | Out of band—fed by tap, span, or packet broker | 2 QSFP28 modules. Support for optical modules at 8 x 10G, 2x 40G or 2 x 100G |
2 x 1G ports 4 x 10G SFP28 ports |
VGA, USB | 100-240 VAC 50/60 Hz redundant dual PSUs.~443W usage when idle and 852W usage at load | 1U rackmount (17.1 x 29 x 1.75 inches), 47.4 lbs |
*Of Zeek-only traffic monitoring. Additional analysis workloads like Suricata IDS or Smart PCAP will reduce sensor throughput speed and performance varies depending on traffic mix.
Cloud Sensor for AWS
AWS minimum system requirements:
- An M4 or M5 type AWS EC2 instance
- Amazon VPC traffic mirroring enabled OR mirroring via 3rd party packet-forwarding agents
Scalable across a range of AWS EC2 instance types:
| Nominal capacity | Instance | Disk (GB) |
| 500 Mbps | m4.xlarge / m5.xlarge | 500 |
| 1 Gbps | m4.2xlarge / m5.xlarge | 500 |
| 2 Gbps | m4.4xlarge / m5.2xlarge | 500 |
| 4 Gbps | m5.8xlarge | 1000 |
| 5 Gbps | m4.10xlarge | 2000 |
| 6 Gbps | m5.12xlarge | 2000 |
| 8 Gbps | m4.16xlarge / m5.16xlarge | 2000 |
Cloud Sensor for Azure
Azure minimum system requirements:
- Azure Ds v3 series (D8s minimum instance)
- Traffic mirroring via 3rd party packet-forwarding agents
Scalable across a range of Azure Ds v3 instance types:
| Nominal capacity | Instance |
| 1 Gpbs | D8s v3 |
| 2 Gbps | D16s v3 |
| 4 Gbps | D32s v3 |
| 6 Gbps | D48s v3 |
| 8 Gbps | D64s v3 |
Cloud Sensor for GCP
GCP minimum system requirements:
- Deploys in E2 or N1 machine types
- Traffic mirroring via 3rd party packet-forwarding agents
Scalable across a range of GCP instance types:
| Nominal capacity | CPUs | RAM (GB) | Disk (GB) | System Requirement |
| 250 Mbps–8 Gbps | 2–64 | 8–256 | 100-4000 | Any 64 bit Linux distribution |
Scalable across a range of reference configurations:
| Gbps | Machine name | vCPUs | Memory (GB) | Workers |
| 0.5 | e2/n2-standard-2 | 2 | 8 | 1 |
| 1 | e2/n2-standard-4 | 4 | 16 | 2 |
| 2 | e2/n2-standard-8 | 8 | 32 | 4 |
| 4 | e2/n2-standard-16 | 16 | 8 | 8 |
| 8 | e2/n2-standard-32 | 32 | 128 | 16 |
Software Sensor
Minimum system requirements for any Linux platform and within containers:
- Any 64-bit Linux distribution
Scalable across a range of reference configurations:
| Nominal capacity | vCPUs | RAM (GB) | Workers |
| 500 Mbps | 2 | 8 | 1 |
| 1 Gbps | 4 | 16 | 2 |
| 2 Gbps | 8 | 32 | 4 |
| 4 Gbps | 16 | 64 | 8 |
| 8 Gbps | 32 | 128 | 16 |
Virtual Sensor for Hyper-V
Hyper-V minimum system requirements:- Windows Server 2016 Hyper-V environment
- Online access for seeding (i.e., inserting certificate)
Scalable across a range of Hyper-V reference configurations:
| Nominal capacity | vCPUs | RAM (GB) | Disk (GB) |
| 500 Mbps | 4 | 16 | 500 |
| 1 Gbps | 8 | 32 | 500 |
| 2 Gbps | 16 | 64 | 500 |
| 4 Gbps | 32 | 128 | 1000 |
| 6 Gbps | 48 | 192 | 2000 |
| 8 Gbps | 64 | 256 | 4000 |
Virtual Sensor for VMware
VMware minimum system requirements:- VMware ESX 6.0 or later
- 4 cores, 16 GB RAM, 500 GB disk
- Online access for initial configuration
Scalable across a range of VMware reference configurations:
| Nominal capacity | vCPUs | RAM (GB) | Disk (GB) |
| 500 Mbps | 4 | 16 | 500 |
| 1 Gbps | 8 | 32 | 500 |
| 2 Gbps | 16 | 64 | 500 |
| 4 Gbps | 32 | 128 | 1000 |
| 6 Gbps | 48 | 192 | 2000 |
| 8 Gbps | 64 | 256 | 4000 |
Have questions?
Talk with one of our experts today.
