Concentrator & Broker
As an enterprise, can you track malicious and anomalous activity and trends across all network assets? Are there relationships between unexplained network activities across your organization? How can you continuously monitor the effectiveness of your security controls?
NetWitness® Concentrator and Broker are high performance Linux-based network appliances that extend the reach of NetWitness NextGen™ across your entire enterprise, and facilitate real-time and historical reporting and alerting. For the first time, comprehensive network and application layer detail can be aggregated and analyzed across multiple capture locations and made available to NextGen’s analytic applications, Informer and Investigator. NetWitness Concentrators aggregate clusters of NetWitness® Decoders in real-time, and NetWitness Broker provides a real-time, single, hierarchical enterprise view across your entire network. NetWitness® Live, fully integrated in the NetWitness infrastructure, provides users full content analysis of network threat intelligence from multiple, globally-distributed threat intelligence sources.
NetWitness Concentrator is designed to aggregate data hierarchically for ultimate scalability and deployment flexibility across various organization-specific network topologies and infrastructures. As a result, Concentrators can be tiered in deployments to give visibility into multiple capture locations.
NetWitness Broker also is designed to operate hierarchically; however, its function is to broker queries across an entire enterprise deployment. Broker provides a single point of access to NextGen data and is designed to operate and scale in any network environment, independent of network latency, throughput, or data volume.
Concentrator and Broker are fully compatible with all NetWitness analytical products. For more advanced applications, users can leverage NextGen’s available API/SDK to build organizational-specific applications which utilize the NetWitness NextGen™ infrastructure.
- Supports 10G infrastructures
- Supports NetWitness® Live
- 64-bit Linux-based hardware platform
- Easily aggregate multiple NetWitness® Decoder collection systems
- Manage and configure appliances from a single point
- Indefinitely scale your collection infrastructure upon distributed, highly manageable, real-time framework
- Expandable SAS storage capacity & supports SAN solutions
- Available API/SDK for custom application development
- Supports RSA SecurID and LDAP authentication
NetWitness® Appliance Models:
| Concentrator | SKU | Processor | RAM | Interfaces | Total Storage | Power | Form Factor | Weight |
|---|---|---|---|---|---|---|---|---|
 |
NWA1200-N-32cx | Hex-Core | 32GB | (2) 100/1000 Copper | 9.5TB Redundant | Redundant 800/850W | 2U, Full-Depth | 66 lbs |
|
NWA2400-N-64cx | Dual Hex-Core | 64GB | (2) 100/1000 Copper | 14.5TB Redundant | Redundant 750/800W | 2U, Full-Depth | 66 lbs |
|
NWA2400-N-128cx | Dual Hex-Core | 128GB | (2) 100/1000 Copper | 14.5TB Redundant | Redundant 750/800W | 2U, Full-Depth | 66 lbs |
| Hybrid | SKU | Processor | RAM | Interfaces | Total Storage | Power | Form Factor | Weight |
 |
NWA200-N-32h | Dual Quad-Core | 32GB | (2) 100/1000 Copper | 8TB Redundant | Redundant 700W | 1U, Full-Depth | 45 lbs |
| Broker | SKU | Processor | RAM | Interfaces | Total Storage | Power | Form Factor | Weight |
|
NWA200-N-8b | Quad-Core | 8GB | (2) 100/1000 Copper | 4TB Redundant | Redundant 450W | 1U, Full-Depth | 45 lbs |
* Appliances are UL, FCC, and CE approved & RoHS Compliant.