QRadar Network Insights 1940-C M6 appliance
New in 7.4.1 The IBM QRadar Network Insights 1940-C (MTM 4654-F7G) appliance provides detailed analysis of network flows to extend the threat detection capabilities of IBM QRadar. QRadar Network Insights 1940-C is based on the Dell R740xd XL server.
The appliance has two Napatech 40 GbE cards. By default, the two ports on the first network capture card are configured for inbound traffic from a network tap or mirrored span. If the appliance is included in a stack, the ports are reconfigured for one inbound and one outbound.
The second Napatech card is cabled internally for load balancing and cannot not be used. The QSFP+ ports on this card are disabled. These ports do not receive data if they are connected to external traffic sources.
The management ports are associated with port items 3 and 4 in the diagram. These are used to replicate data between QRadar Network Insights and the Console. The port item 2 is reserved for the management controller remote management system.
For more information about cabling stacked appliances, see the QRadar Network Insights Installation Guide.
The following table shows the hardware information and requirements for the IBM QRadar Network Insights 1940-C (MTM 4654-F7G) appliance:
| Description | Value |
|---|---|
| CPU | 2 x Xeon Gold 6240 20C 2.6 GHz 24 MB Cache 150W |
| Network capture transceivers |
2 x 40 GbE SR4 QSFP+ transceivers (Finisar FTL410QD2C) Use these transceivers with the network packet capture card, labeled as [5] in the appliance diagram. |
| Network management transceivers |
2 x 10 GbE Short Range SFP+ The cards might have one of the following part numbers:
Use these cards with the 2 x 10 GbE SFP+ management ports, labeled as [3] in the appliance diagram. |
| Ports |
4 x 1 Gb Ethernet ports 2 x 10 GbE SFP+ ports 1 x RJ-45 10/100/1000 Mb Ethernet systems management (iDRAC) port 2 x Network capture ports (QSFP+) (Model NT200A02) |
| Storage | 2 x 480 GB SATA 2.5” SSD PERC H730P RAID 1 |
| Memory | 8 x 32 GB (256 GB) |
| Traffic | 40 Gbps |
| Power supply | Dual redundant 750 W AC |
| Dimensions | 29.0 inches deep x 17.1 inches wide x 3.4 inches high |
System performance of QRadar Network Insights appliances varies depending on the on Inspection settings and the type and amount of network data.
For more information, see Performance impacts in the IBM QRadar Network Insights Installation Guide.
The following image is of the QRadar Network Insights 1940-C appliance.
| Label | Description |
|---|---|
| 1 | QRadar system storage |
| 2 | 1 x RJ-45 10/100/1000 Mb Ethernet systems management IPMI (iDRAC) port |
| 3 | Management ports (10 GbE SFP+) |
| 4 | Management ports (1 GbE TX) |
| 5 | Network Packet Capture (QSFP+) |
| 6 | Network Packet Capture (Unpopulated) |
For information about battery replacement, see Dell EMC PowerEdge R740 Installation and Service Manual (https://topics-cdn.dell.com/pdf/poweredge-r740_owners-manual_en-us.pdf).
Appliance stacking
You can stack the QRadar Network Insights 1940 (type 6600) appliances to distribute network packets across multiple Napatech cards. The following image shows how to connect the cables on up to four QRadar Network Insights 1940 appliances in a stacked configuration. On the first appliance, port 0 is used for the network tap or span port. The traffic is then mirrored to Port 1 on the same card, which sends data to port 0 of the next appliance in the stack.
