Cisco Cisco Security Packet Analyzer 2400 Scheda Tecnica
© 2016 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 2 of 5
Figure 2. Cisco Security Packet Analyzer 2400
Features and Benefits
Feature
Benefit
High-performance packet capture
● Adds real-time 4 x 1 GE and 2 x 10 GE network performance, capturing all frames including those
normally discarded by standard network interface cards (NICs)
On-premises appliance
● Provides safe and highly secure on-premises capture and storage to maintain the confidentiality of
data
Integration with Stealthwatch
● Uses Stealthwatch flow data analysis to locate specific points in the data stream and to generate a
detailed search query that Packet Analyzer uses to locate those packets
API
● Simplifies fast operationalization of threat intelligence with existing security and network
infrastructure
Industry-standard storage
● Security Packet Analyzer stores data in industry-standard packet capture format; this enables the
use of high-performance through packet capture or WinPcap
The Cisco Security Packet Analyzer is based on technology developed for the Cisco Network Analysis Module
(NAM). It builds on the features and improvements delivered in NAM version 6.2. These include support for
Remote Integrated Services Engine (RISE) technology, which allows the switch (Cisco Nexus
®
7000 Series and
others) to “see” the Packet Analyzer appliance as a blade. Other highlights include the termination of Encapsulated
Remote SPAN (ERSPAN) on the data port to extend traffic capture capabilities. By terminating the high-speed
ERSPAN on the data port, Packet Analyzer can access Type III ERSPAN headers and process ERSPAN at higher
speeds.
The Security Packet Analyzer appliance takes full advantage of the Cisco Unified Computing System
™
(Cisco
UCS
®
) C240 rack-mounted server platform to deliver high performance, reliability, and manageability. The
appliance can be configured with either four Gigabit Ethernet or two 10 Gigabit Ethernet monitoring copper (RJ-45)
or optical (Small Form-Factor Pluggable, or SFP) interfaces and a 100/1000 RJ-45 Ethernet management port.
This appliance solution includes 128 GB of DRAM and 48 TB of hot-swappable enterprise-class SAS storage.
Storage can be extended through the external SAS port.
Product Specifications
Table 1.
Product Specifications
Packet Analyzer Feature
Description
Chassis
2 rack units (2RU)
Processor
2 Intel
®
Xeon
®
E5-2660 processors
Memory
128 GB industry-standard double data rate (DDR4) main memory
Storage
48 TB (24 x 2 TB) SAS drives
Storage expansion
SAS port and modular LAN on motherboard (mLOM)