Introduction

[#1]

Introduction

The instructions in this guide apply to physical hosts exclusively. See the Virtual Host Installation Guide for NetWitness Platform 12.5 for instructions on how to set up virtual hosts in 12.5.

Note: Go to the NetWitness All Versions Documents page and find NetWitness Platform guides to troubleshoot issues.

Supported Hardware

Series 6 and Series 7.

Refer to the NetWitness Hardware Setup Guides for detailed information on each series type (https://community.netwitness.com/t5/netwitness-platform-hardware/tkb-p/netwitness-hardware-documentation).

Series 6 Specifications

Item	Core	ESA/Analytics	Hybrid
Host Type	NW Server, Log Decoder, Network Decoder (Packets), Concentrator, Broker, Archiver, Malware Analysis	ESA UEBA	Log Decoder Hybrid, Network Decoder Hybrid (Packets), Endpoint Log Hybrid
Model	Dell PowerEdge R640 Dell PowerEdge R640		Dell PowerEdge R740
Processor
Type	Intel Xeon Gold 6134	Intel Xeon Gold 6126	Intel Xeon Gold 6132
Processor Speed	3.2Ghz	2.6Ghz	2.6Ghz
Cache	24.75M 1 Cache	19.25M Cache	19M Cache
# of Processors	2	2	2
# of Cores	8 Cores per Processor	12 Cores per Processor	14 Cores per Processor
# of Threads	16 Threads per Processor	24 Threads per Processor	28 Threads per Processor
Series 6 Hard Drives Field replaceable Hot swappable	2 X 1TB NL-SAS 7.2K 2 X 2TB NL-SAS 7.2K Total - 4 Drives Slots 0-1: 1TB Slots 2-3: 2TB	2 X 1TB NL-SAS 7.2K 4 X 2.4TB SAS 10K Total - 6 Drives Slots 0-1: 1TB Slots 2-5: 2.4TB	4 X 2TB NL-SAS 7.2K 8 X 8TB NL-SAS 7.2K 2 x 1.6TB SSD Total - 14 Drives Slots 0-3 (Front): 2TB Slots 4-11 (Front): 8TB Slots 12-13 (Rear): 1.6TB SSD
Series 6E Self-Encrypting Drives (SEDs) FIPS140 Certified Field replaceable Hot swappable	2 X 1.2TB SAS 10K SED 2 X 2.4TB SAS 10K SED Total - 4 Drives Slots 0-1: 1.2TB Slots 2-3: 2.4TB	2 X 1.2TB SAS 10K SED 4 X 2.4TB SAS 10K SED Total - 6 Drives Slots 0-1: 1.2TB Slots 2-5: 2.4TB	2 X 2.4TB SAS 10K SED 10 X 8TB NL-SAS 7.2K SED 2 x 1.92TB SSD SED Total - 14 Drives Slots 0-1 (Front): 2.4TB Slots 2-11 (Front): 8TB Slots 12-13 (Rear): 1.92TB SSD
Memory	128GB 4 * 32GB RDIMM 2666MT/s Dual Rank	256GB 8 * 32GB RDIMM 2133MT/s	128GB 4 * 32GB RDIMM 2666MT/s Dual Rank
Storage Controllers	External PERC H840, Internal PERC H740P
Network Interface Card	Intel X710 DP 10Gb DA/SFP+, + 1350 DP 1Gb Ethernet, Network Daughter Card
Power
PSU	Dual, Hot-plug, Redundant Power Supply (1+1), 1100 W AC
BTU/hr	4100 BTU/hr (Maximum)
Voltage	100-240 V AC, autoaranging
Current	12 A - 6.5 A
Form Factor	1U, full depth		2U, full depth
Weight (approximate)	21.9 kg (48.28 lbs)		33.1 kg (72.91 lb)
Dimensions (approximate)	With bezel: 482.0 mm (18.97 in) [w] x 808.51 mm (31.83 in) [d] x 42.8 mm (1.68 in) [h] Without bezel: 482.0 mm (18.97 in) [w] x 794.67 mm (31.29 in) [d] x 42.8 mm (1.68 in) [h]		With bezel: 482.0 mm (18.98 in) [w] x 751.34 mm (29.58 in) [d] x 86.8 mm (3.42 in) [h] Without bezel: 482.0 mm (18.98 in) [w] x 737.50 mm (29.04 in) [d] x 86.8 mm (3.42 in) [h]
Shipping Dimensions	Server boxed for shipping (includes rail kit) Height: 30.48 cm (12 inch) Width: 104.14 cm (41 inch) Depth: 64.14 cm (25.25 inch) Weight: 25.85 kg (57 lb)		Server boxed for shipping (includes rail kit) Height: 32.39 cm (12.75 inch) Width: 95.25 cm (37.50 inch) Depth: 66.04 cm (26.00 inch) Weight: 35 kg (81.86 lb)
Throughput / EPS	Network: 2-10 Gbps Logs: 30K EPS	N/A	Network: 1 Gbps Logs: 20K EPS
Supported SFPs & Add-On Cards	Add-On Cards 1G QP Intel Copper Adapter 10G DP Intel Copper Adapter 10G DP Intel Optical Adapter External PERC H840 16G DP Emulex HBA SFPs 1G SFP Intel Copper 10G SFP Short Range Intel Optical (standard) 10G SFP Long Range Intel Optical

Note: Network Interface Controller (NIC) card options are available for swap with on-board daughter cards or add ons.

Series 7 Specifications

Item	s7-head(R660)	s7-core(R660)	s7-esa(R660)	s7-hybrid(R760)
Host Type	NW Server, Broker, Archiver, Malware Analysis	Decoder, LogDecoder, Concentrator	ESA Primary, ESA Primary Standby , ESA Secondary, UEBA	Network Hybrid, LogHybrid, Endpoint Log Hybrid
Model	Dell PowerEdge R660 XL	Dell PowerEdge R660	Dell PowerEdge R660	Dell PowerEdge R760
Processor
Type	Intel(R) Xeon(R) Gold 5415+	Intel(R) Xeon(R) Platinum 8462Y+	Intel(R) Xeon(R) Gold 6448Y	Intel(R) Xeon(R) Gold 6426Y
Processor Speed	2.9 Ghz	2.8Ghz	2.1Ghz	2.5Ghz
Cache	22.5M	60M	60M	38M
# of Processors	2	2	2	2
# of Cores	8	8	32	16
# of Threads	16	64	64	32
Series 7 Drives
	4 X 2.4TB SAS FIPS-140 10K HDD	4 X 2.4TB SAS FIPS-140 10K HDD	8 X 1.6TB Enterprise NVMe, FIPS	2 X 2.4 TB SAS 10K FIPS-140
				10 X 16TB Hard Drive SAS FIPS-140 12Gbps 7.2K
				2 x 3.84TB SSD SAS, Read Intensive,FIPS-140
	Total - 4 Drives	Total - 4 Drives	Total - 8 Drives	Total - 14 Drives
Field Replaceable	Slots 0-3: 2.4TB	Slots 0-3: 2.4TB	Slots 0-7: 1.6 TB	Slots 0-1 (Front): 2.4 TB
				Slots 2-11 (Front): 16TB; Slots 12-13 (Rear):3.84TB SSD
Memory	128GB 4 * 32GB RDIMM 4800MT/s Dual Rank	256GB 8 * 32GB RDIMM 4800MT/s Dual Rank	512GB 16 * 32GB RDIMM 4800MT/s Dual Rank	128GB 4 * 32GB RDIMM 4800MT/s Dual Rank
Storage Controllers	External PERC H965e, Internal PERC H965i	External PERC H965e, Internal PERC H965i	External PERC H965e, Internal PERC H965i	External PERC H965e, Internal PERC H965i
Network Interface Card	Broadcom 5720 Dual Port 1GbE LOM Intel E810-XXV Dual Port 10/25GbE SFP28, OCP NIC 3.0	Broadcom 5720 Dual Port 1GbE LOM Intel E810-XXV Dual Port 10/25GbE SFP28, OCP NIC 3.0	Broadcom 5720 Dual Port 1GbE LOM Intel E810-XXV Dual Port 10/25GbE SFP28, OCP NIC 3.0	Broadcom 5720 Dual Port 1GbE LOM Intel E810-XXV Dual Port 10/25GbE SFP28, OCP NIC 3.0
Form Factor	1U, full depth	1U, full depth	1U, full depth	2U, full depth
Power
PSU	Dual, Fully Redundant(1+1), Hot-Plug Power Supply,1100W MM(100-240Vac) Titanium	Dual, Hot-Plug, Power Supply Fault Tolerant Redundant (1+1), 1100W MM (100-240Vac) Titanium, NAF	Dual, Fully Redundant(1+1), Hot-Plug Power Supply,1100W MM(100-240Vac)	Dual, Hot-Plug, FR Power Supply, 1100W MM (100-240Vac) Titanium, Redundant (1+1)
BTU/hr	4100 BTU/hr (Maximum)	4100 BTU/hr (Maximum)	4100 BTU/hr (Maximum)	4100 BTU/hr (Maximum)
Voltage	100-240 V AC	100-240 V AC, autoaranging	100-240 V AC, autoaranging	100-240 V AC, autoaranging
Current	12 A - 6.5 A	12 A - 6.5 A	12 A - 6.5 A	12 A - 6.5 A
Weight (approximate
Dimensions (approximate)	With Bezel: Height – 42.8 mm (1.68 inches) Width – 482 mm (18.97 inches) Depth – 822.88 mm (32.39 inches)	With Bezel: Height – 42.8 mm (1.68 inches) Width – 482 mm (18.97 inches) Depth – 822.88 mm (32.39 inches)	With Bezel: Height – 42.8 mm (1.68 inches) Width – 482 mm (18.97 inches) Depth – 822.88 mm (32.39 inches)	With Bezel: Height – 86.8 mm (3.41 inches) Width – 482 mm (18.97 inches) Depth – 772.13 mm (30.39 inches)
	Without Bezel: Height - 42.8 mm (1.68 inches) Width - 482 mm (18.97 inches) Depth - 809.04 mm (31.85 inches)	Without Bezel: Height - 42.8 mm (1.68 inches) Width - 482 mm (18.97 inches) Depth - 809.04 mm (31.85 inches)	Without Bezel: Height - 42.8 mm (1.68 inches) Width - 482 mm (18.97 inches) Depth - 809.04 mm (31.85 inches)	Without Bezel: Height – 86.8 mm (3.41 inches) Width – 482 mm (18.97 inches) Depth - 758.29 mm (29.85 inches)
Shipping Dimensions (Server boxed for shipping -includes rail kit)	Height: 30.48 cm (12 inch) Width: 104.14 cm(41inch) Depth: 64.14 (25.25 inch) Weight: 25.85 kg (57 lb)	Height: 30.48 cm (12 inch) Width: 104.14 cm (41inch) Depth: 64.14 (25.25 inch) Weight: 25.85 kg (57 lb)	Height: 30.48 cm (12 inch) Width: 104.14 cm (41 inch) Depth: 64.14 (25.25 inch) Weight: 25.85 kg (57 lb)	Height: 32.39 cm (12.75 inch) Width: 95.25 cm (37.50 inch) Depth: 66.04 cm (26 inch) Weight: 35 kg (81.86 lb)
Throughput / EPS	N/A	Network: 2-10 Gbps ; Logs: 30K EPS	N/A	Network: 1 Gbps ; Logs: 20K EPS
Supported SFPs & Add-On Cards	SFP28 SR Optic, 25GbE, 85C, for all SFP28 ports	SFP28 SR Optic, 25GbE, 85C, for all SFP28 ports	SFP28 SR Optic, 25GbE, 85C, for all SFP28 ports	SFP28 SR Optic, 25GbE, 85C, for all SFP28 ports

External Attached Storage

If you have external storage devices (for example, PowerVaults) attached to physical hosts, refer to the Hardware Setup Guides on NetWitness Community (https://community.netwitness.com/t5/netwitness-platform-hardware/tkb-p/netwitness-hardware-documentation) for information on how to configure this storage.

Physical Host Installation Workflow

The following diagram illustrates the NetWitness 12.5 Physical Host Installation workflow.

Self-Help Resources

There are several options that provide you with help as you need it for installing and using NetWitness:

• See the documentation for all aspects of NetWitness here: https://community.netwitness.com/t5/netwitness-platform/ct-p/netwitness-documentation
• Use the Search and Ask it fields in NetWitness Community to find specific information here: https://community.netwitness.com/
• See the NetWitness Knowledge Base: https://community.netwitness.com/t5/netwitness-knowledge-base/tkb-p/netwitness-knowledge-base
• See Troubleshooting section in the Guides.
• See also NetWitness® Platform Blog Posts.
• If you need further assistance, contact NetWitness Support.

Contact NetWitness Support

If you contact NetWitness Support, you should be at your computer. Be prepared to provide the following information:

• The version number of the NetWitness Platform product or application you are using.
• The type of hardware you are using.

Use the following contact information if you have any questions or need assistance.

NetWitness Community	https://community.netwitness.com/ In the main menu, click Support > Case Portal > View My Cases.
International Contacts (How to Contact NetWitness Support)	https://community.netwitness.com/t5/support-information/how-to-contact-netwitness-support/ta-p/563897
Community	https://community.netwitness.com/t5/support/ct-p/support