Introduction
The instructions in this guide apply to physical hosts exclusively. See the Virtual Host Installation Guide for NetWitness Platform 12.4 for instructions on how to set up virtual hosts in 12.4.
Note: Go to the NetWitness All Versions Documents page and find NetWitness Platform guides to troubleshoot issues.
Supported Hardware
Series 6
Refer to the NetWitness Hardware Setup Guides for detailed information on each series type (https://community.netwitness.com/t5/netwitness-platform-hardware/tkb-p/netwitness-hardware-documentation).
Series 6 Specifications
Item |
Core |
ESA/Analytics |
Hybrid |
---|---|---|---|
Host Type |
NW Server, Log Decoder, Network Decoder (Packets), Concentrator, Broker, Archiver, Malware Analysis |
ESA |
Log Decoder Hybrid, Network Decoder Hybrid (Packets), Endpoint Log Hybrid |
Model | Dell PowerEdge R640 Dell PowerEdge R640 | Dell PowerEdge R740 | |
Processor |
|||
Type |
Intel Xeon Gold 6134 |
Intel Xeon Gold 6126 |
Intel Xeon Gold 6132 |
Processor Speed |
3.2Ghz |
2.6Ghz |
2.6Ghz |
Cache | 24.75M 1 Cache | 19.25M Cache | 19M Cache |
# of Processors |
2 |
2 |
2 |
# of Cores | 8 Cores per Processor |
12 Cores per Processor |
14 Cores per Processor |
# of Threads |
16 Threads per Processor |
24 Threads per Processor |
28 Threads per Processor |
Series 6 Hard Drives Field replaceable Hot swappable |
2 X 1TB NL-SAS 7.2K Total - 4 Drives |
2 X 1TB NL-SAS 7.2K Total - 6 Drives |
4 X 2TB NL-SAS 7.2K Total - 14 Drives |
Series 6E Self-Encrypting Drives (SEDs) FIPS140 Certified Field replaceable Hot swappable |
2 X 1.2TB SAS 10K SED Total - 4 Drives |
2 X 1.2TB SAS 10K SED Total - 6 Drives |
2 X 2.4TB SAS 10K SED Total - 14 Drives |
Memory | 128GB 4 * 32GB RDIMM 2666MT/s Dual Rank |
256GB 8 * 32GB RDIMM 2133MT/s |
128GB 4 * 32GB RDIMM 2666MT/s Dual Rank |
Storage Controllers |
External PERC H840, Internal PERC H740P |
||
Network Interface Card | Intel X710 DP 10Gb DA/SFP+, + 1350 DP 1Gb Ethernet, Network Daughter Card | ||
Power |
|||
PSU |
Dual, Hot-plug, Redundant Power Supply (1+1), 1100 W AC |
||
BTU/hr |
4100 BTU/hr (Maximum) |
||
Voltage | 100-240 V AC, autoaranging | ||
Current |
12 A - 6.5 A |
||
Form Factor |
1U, full depth |
2U, full depth |
|
Weight (approximate) | 21.9 kg (48.28 lbs) | 33.1 kg (72.91 lb) | |
Dimensions (approximate) |
With bezel: 482.0 mm (18.97 in) [w] x 808.51 mm (31.83 in) [d] x 42.8 mm (1.68 in) [h] |
With bezel: 482.0 mm (18.98 in) [w] x 751.34 mm (29.58 in) [d] x 86.8 mm (3.42 in) [h] |
|
Shipping Dimensions |
Server boxed for shipping |
Server boxed for shipping (includes rail kit) Height: 32.39 cm (12.75 inch) Width: 95.25 cm (37.50 inch) Depth: 66.04 cm (26.00 inch) Weight: 35 kg (81.86 lb) |
|
Throughput / EPS |
Network: 2-10 Gbps |
N/A |
Network: 1 Gbps |
Supported SFPs & Add-On Cards |
Add-On Cards 1G QP Intel Copper Adapter 10G DP Intel Copper Adapter 10G DP Intel Optical Adapter 40G Intel XL710-QDA2 External PERC H840 16G DP Emulex HBA SFPs 1G SFP Intel Copper 10G SFP Short Range Intel Optical (standard) 10G SFP Long Range Intel Optical 40G QSFP (PN: E40GQSFPSR) Short Range Intel Optical (required optical fiber cable: MPO-12 OM4 Female-Female Type-B - not included) |
Note: Network Interface Controller (NIC) card options are available for swap with on-board daughter cards or add ons.
Endpoint Log Hybrid Host Hardware Specifications
Series 6 (RSA R740 hardware. See "(Optional) Task 2 - Install Endpoint Log Hybrid" in Post Installation Tasks for instructions on how to install the Endpoint Log Hybrid.
Note: If you have RSA NetWitness Endpoint 4.x hardware, you can re-purpose it for NetWitness Endpoint Log Hybrid 12.0.
NetWitness UEBA Host Hardware Specifications
S6 (RSA R640) hardware. See "(Optional) Task 3 - Install NetWitness UEBA" in Post Installation Tasks for instructions on how to install NetWitness UEBA.
External Attached Storage
If you have external storage devices (for example, DACs or PowerVaults) attached to physical hosts, refer to the Hardware Setup Guides on NetWitness Community (https://community.netwitness.com/t5/netwitness-platform-hardware/tkb-p/netwitness-hardware-documentation) for information on how to configure this storage.
Physical Host Installation Workflow
The following diagram illustrates the NetWitness 12.1 Physical Host Installation workflow.
Self-Help Resources
There are several options that provide you with help as you need it for installing and using NetWitness:
- See the documentation for all aspects of NetWitness here: https://community.netwitness.com/t5/netwitness-platform/ct-p/netwitness-documentation
- Use the Search and Ask it fields in NetWitness Community to find specific information here: https://community.netwitness.com/
- See the NetWitness Knowledge Base: https://community.netwitness.com/t5/netwitness-knowledge-base/tkb-p/netwitness-knowledge-base
- See Troubleshooting section in the Guides.
- See also NetWitness® Platform Blog Posts.
- If you need further assistance, contact NetWitness Support.
Contact NetWitness Support
If you contact NetWitness Support, you should be at your computer. Be prepared to provide the following information:
- The version number of the NetWitness Platform product or application you are using.
- The type of hardware you are using.
Use the following contact information if you have any questions or need assistance.
NetWitness Community |
https://community.netwitness.com/ In the main menu, click Support > Case Portal > View My Cases. |
International Contacts (How to Contact NetWitness Support) | https://community.netwitness.com/t5/support-information/how-to-contact-netwitness-support/ta-p/563897 |
Community | https://community.netwitness.com/t5/support/ct-p/support |