QRadar Network Insights 1920-C M5 appliance

The IBM QRadar Network Insights 1920-C (MTM 4654-F4F) appliance provides detailed analysis of network flows to extend the threat detection capabilities of IBM QRadar.

The appliance has two Napatech cards, each with four ports. By default, the four ports on the first network capture card are configured for inbound traffic from the network tap. If the appliance is included in a stack, the ports are reconfigured for 2 inbound and 2 outbound. For more information about cabling stacked appliances, see the IBM QRadar Network Insights Installation Guide.

The second Napatech card is cabled internally for load balancing and cannot not be used. If you use these ports when you cable the appliance, you do not get any data.

The following table shows the hardware information and requirements for the IBM QRadar Network Insights 1920-C (MTM 4654-F4F) appliance.

Table 1. QRadar Network Insights 1920-C specifications
Description Value
CPU 2 x Xeon Gold 6132 14C 2.6 GHz 19 MB Cache 3.70 GHz 140 W
Network capture transceivers

2 x 10 Gb Short Range fiber Transceivers (Avago AFBR-703SDZ or AFBR-709SMZ)

2 x 1 G TX RJ-45 Transceivers (Avago ABCU-5710RZ or ABCU-5740RZ)

2 x 1 G SX LC Transceivers (Avago AFBR-5715PZ)

Use these transceivers with the network packet capture card, labeled as [2] in the appliance diagram.
Network management transceivers

2 x 10 GbE Short Range SFP+

The transceivers can have one of the following part numbers:
  • Avago AFBR-709SMZ-IB8
  • Finisar FTLX8571D3BCL-BN
  • BNT BN-CKM-SP-SR

Use these transceivers with the 2 x 10 GbE SFP+ ports, labeled as [3] in the appliance diagram.
Ports

Network Packet Capture (SFP/SFP+) port (Model NT40E3-4)

4 x 1 Gb Ethernet ports

1 x RJ-45 10/100/1000 Mb Ethernet systems management IPMI (iDRAC) port

2 x 10 Gbps SFP+ management ports
Memory 128 GB, 8 x 16 GB
Storage 2 x 240 GB SATA 2.5" SSD, 240 GB Total (RAID1)
Traffic rate 10 Gbps
Power supply Dual redundant 750 W AC
Unit weight 73 lbs
Physical dimensions 29.0 inches deep x 17.1 inches wide x 3.4 inches high

The following image is of the QRadar Network Insights 1920-C appliance.

Figure 1. Front and back panel of the QRadar Network Insights 1920-C appliance
Image showing the back and front panels of the QRadar Network Insights 1920-C appliance.

Picture: © 2018 Dell Inc. or its subsidiaries. All Rights Reserved

Table 2. Legend for use with the QRadar Network Insights 1920-C image
Label Description
1 QRadar firmware storage
2 1 x RJ-45 10/100/1000 Mb Ethernet systems management IPMI (iDRAC) port
3 Management ports (10 GbE SFP+)
4 Management ports (1 GbE TX)
5 Network Packet Capture (SFP/SFP+)

Ports are numbered 3, 2, 1, 0, from left to right.
6 Do not use these ports.

For information about battery replacement, see Dell EMC PowerEdge R740 Installation and Service Manual (https://topics-cdn.dell.com/pdf/poweredge-r740_owners-manual_en-us.pdf).

Appliance stacking

You can stack the QRadar Network Insights appliances (type 6200). When your deployment has incoming data on one network tap only, the stacked appliances must be cabled like this:

Figure 2. Cabling for stacked 1920 appliances with single network TAP
Cabling diagram for stacked appliances with single network taps

When your deployment has incoming data on two network taps, the stacked appliances must be cabled like this:

Figure 3. Cabling for stacked 1920 appliances with dual network TAP
Cabling diagram for stacked appliances with dual network taps