Introduction

The instructions in this guide apply to physical hosts exclusively. See the Virtual Host Installation Guide for NetWitness Platform 12.4 for instructions on how to set up virtual hosts in 12.4.

Note: Go to the NetWitness All Versions Documents page and find NetWitness Platform guides to troubleshoot issues.

Supported Hardware

Series 6

Refer to the NetWitness Hardware Setup Guides for detailed information on each series type (https://community.netwitness.com/t5/netwitness-platform-hardware/tkb-p/netwitness-hardware-documentation).

Series 6 Specifications

Item

 Core

ESA/Analytics

 Hybrid

Host Type

NW Server, Log Decoder, Network Decoder (Packets), Concentrator, Broker, Archiver, Malware Analysis

ESA
UEBA

Log Decoder Hybrid, Network Decoder Hybrid (Packets), Endpoint Log Hybrid
Model Dell PowerEdge R640 Dell PowerEdge R640 Dell PowerEdge R740

Processor
Type

Intel Xeon Gold 6134

Intel Xeon Gold 6126

Intel Xeon Gold 6132

Processor Speed

3.2Ghz

2.6Ghz

2.6Ghz
Cache 24.75M 1 Cache 19.25M Cache 19M Cache

# of Processors

2

2

2
# of Cores 8 Cores per
Processor		 12 Cores per
Processor		 14 Cores per Processor

# of Threads

16 Threads per Processor

24 Threads per Processor

28 Threads per Processor

Series 6

Hard Drives

Field replaceable

Hot swappable

2 X 1TB NL-SAS 7.2K
2 X 2TB NL-SAS 7.2K

Total - 4 Drives
Slots 0-1: 1TB
Slots 2-3: 2TB

2 X 1TB NL-SAS 7.2K
4 X 2.4TB SAS 10K

Total - 6 Drives
Slots 0-1: 1TB
Slots 2-5: 2.4TB

4 X 2TB NL-SAS 7.2K
8 X 8TB NL-SAS 7.2K
2 x 1.6TB SSD

Total - 14 Drives
Slots 0-3 (Front): 2TB
Slots 4-11 (Front): 8TB
Slots 12-13 (Rear): 1.6TB SSD

Series 6E

Self-Encrypting Drives (SEDs)

FIPS140 Certified

Field replaceable

Hot swappable

2 X 1.2TB SAS 10K SED
2 X 2.4TB SAS 10K SED

Total - 4 Drives
Slots 0-1: 1.2TB
Slots 2-3: 2.4TB

2 X 1.2TB SAS 10K SED
4 X 2.4TB SAS 10K SED

Total - 6 Drives
Slots 0-1: 1.2TB
Slots 2-5: 2.4TB

2 X 2.4TB SAS 10K SED
10 X 8TB NL-SAS 7.2K SED
2 x 1.92TB SSD SED

Total - 14 Drives
Slots 0-1 (Front): 2.4TB
Slots 2-11 (Front): 8TB
Slots 12-13 (Rear): 1.92TB SSD
Memory 128GB
4 * 32GB RDIMM
2666MT/s Dual Rank		 256GB
8 * 32GB RDIMM
2133MT/s		 128GB
4 * 32GB RDIMM
2666MT/s Dual Rank

Storage Controllers

External PERC H840, Internal PERC H740P
Network Interface Card Intel X710 DP 10Gb DA/SFP+, + 1350 DP 1Gb Ethernet, Network Daughter Card

Power
PSU

Dual, Hot-plug, Redundant Power Supply (1+1), 1100 W AC

BTU/hr

4100 BTU/hr (Maximum)
Voltage 100-240 V AC, autoaranging

Current

12 A - 6.5 A

Form Factor

1U, full depth

2U, full depth
Weight (approximate) 21.9 kg (48.28 lbs) 33.1 kg (72.91 lb)

Dimensions (approximate)

With bezel: 482.0 mm (18.97 in) [w] x 808.51 mm (31.83 in) [d] x 42.8 mm (1.68 in) [h]
Without bezel: 482.0 mm (18.97 in) [w] x 794.67 mm (31.29 in) [d] x 42.8 mm (1.68 in) [h]

With bezel: 482.0 mm (18.98 in) [w] x 751.34 mm (29.58 in) [d] x 86.8 mm (3.42 in) [h]
Without bezel: 482.0 mm (18.98 in) [w] x 737.50 mm (29.04 in) [d] x 86.8 mm (3.42 in) [h]
Shipping Dimensions

Server boxed for shipping
(includes rail kit)
Height: 30.48 cm (12 inch)
Width: 104.14 cm (41 inch)
Depth: 64.14 cm (25.25 inch)
Weight: 25.85 kg (57 lb)

 Server boxed for shipping (includes rail kit)
Height: 32.39 cm (12.75 inch)
Width: 95.25 cm (37.50 inch)
Depth: 66.04 cm (26.00 inch)
Weight: 35 kg (81.86 lb)

Throughput / EPS

Network: 2-10 Gbps
Logs: 30K EPS

N/A

Network: 1 Gbps
Logs: 20K EPS

Supported SFPs & Add-On Cards

Add-On Cards

1G QP Intel Copper Adapter

10G DP Intel Copper Adapter

10G DP Intel Optical Adapter

40G Intel XL710-QDA2

External PERC H840

16G DP Emulex HBA

SFPs

1G SFP Intel Copper

10G SFP Short Range Intel Optical (standard)

10G SFP Long Range Intel Optical

40G QSFP (PN: E40GQSFPSR) Short Range Intel Optical (required optical fiber cable: MPO-12 OM4 Female-Female Type-B - not included)

Note: Network Interface Controller (NIC) card options are available for swap with on-board daughter cards or add ons.

Endpoint Log Hybrid Host Hardware Specifications

Series 6 (RSA R740 hardware. See "(Optional) Task 2 - Install Endpoint Log Hybrid" in Post Installation Tasks for instructions on how to install the Endpoint Log Hybrid.

Note: If you have RSA NetWitness Endpoint 4.x hardware, you can re-purpose it for NetWitness Endpoint Log Hybrid 12.0.

NetWitness UEBA Host Hardware Specifications

S6 (RSA R640) hardware. See "(Optional) Task 3 - Install NetWitness UEBA" in Post Installation Tasks for instructions on how to install NetWitness UEBA.

External Attached Storage

If you have external storage devices (for example, DACs or PowerVaults) attached to physical hosts, refer to the Hardware Setup Guides on NetWitness Community (https://community.netwitness.com/t5/netwitness-platform-hardware/tkb-p/netwitness-hardware-documentation) for information on how to configure this storage.

Physical Host Installation Workflow

The following diagram illustrates the NetWitness 12.1 Physical Host Installation workflow.

netwitness_freshinstallprocess.png

Self-Help Resources

There are several options that provide you with help as you need it for installing and using NetWitness:

Contact NetWitness Support

If you contact NetWitness Support, you should be at your computer. Be prepared to provide the following information:

  • The version number of the NetWitness Platform product or application you are using.
  • The type of hardware you are using.

Use the following contact information if you have any questions or need assistance.

NetWitness Community

https://community.netwitness.com/

In the main menu, click Support > Case Portal > View My Cases.
International Contacts (How to Contact NetWitness Support) https://community.netwitness.com/t5/support-information/how-to-contact-netwitness-support/ta-p/563897
Community https://community.netwitness.com/t5/support/ct-p/support