Prerequisites for installing QRadar Network Insights on your own appliance

Before you install IBM® QRadar® Network Insights on your own appliance, ensure that you follow these installation guidelines and that your hardware meets the system requirements.

Installation requirements

Follow these guidelines when installing QRadar Network Insights software on your own appliance:

  • You must acquire entitlement to a QRadar Software Node for a QRadar Network Insights software installation.

    To acquire entitlement to a QRadar Software Node, contact your QRadar Sales Representative.

  • Do not install software other than QRadar Network Insights on your hardware.

    Unapproved RPM installations can cause dependency errors when you upgrade QRadar Network Insights software and can also cause performance issues in your deployment.

  • Do not update your operating system or packages before or after QRadar Network Insights installation.

Minimum system requirements

The following table describes the system requirements for QRadar Network Insights software installations:

Restriction: Resizing logical volumes is not supported.
Table 1. Minimum system requirements for QRadar Network Insights software installations

Requirement

Details

CPU

The system must use a processor that is supported by the Red Hat® Enterprise Linux® (RHEL) version that is required for the QRadar Network Insights installation. To determine which version of RHEL is required, see Installing RHEL on your hardware. To determine which processors are supported by the version of RHEL, refer to the vendor documentation.

Virtualization hardware extensions such as Intel VT or AMD-V must be enabled in the BIOS. This requirement does not apply to the following systems:
  • Appliances that have a Napatech card.
  • Virtual hosts such as EC2 instances and VMware guests.
Storage

Capacity: 480 GB

IOPS: 300

Data transfer rate (MB/s): 300

Memory (RAM)

64 GB

If a memory upgrade is required, you must upgrade it before you install QRadar Network Insights.

Network capture cards One of the following network interface cards for traffic capture:
  • Napatech NT40E3
  • Intel x520
  • Intel x710

Maximum of one capture card per host.

Network management interface One of the following network interface cards for management:
  • RJ-45 10/100/1000 Mb Ethernet systems management port
  • 10 GbE SFP+ port