QRadar Network Insights 1920
The IBM® QRadar® Network Insights 1920 (MTM 4412-F3F) appliance provides detailed analysis of network flows to extend the threat detection capabilities of IBM QRadar.
The appliance has two Napatech cards, each with four ports. By default, the four ports on the first network capture card are configured for inbound traffic from the network tap. If the appliance is included in a stack, the ports are reconfigured for 2 inbound ports and 2 outbound ports. For more information about cabling stacked appliances, see the IBM QRadar Network Insights Installation Guide.
The second Napatech card is cabled internally for load balancing and cannot not be used. If you use these ports when you cable the appliance, you do not get any data.
The following table shows the hardware information and requirements for the IBM QRadar Network Insights 1920 (MTM 4412-F3F) appliance:
| Description | Value |
|---|---|
| CPU | 2 x E5-2680 v4 14C 2.4 GHz 35 MB 2400 MHz 120W |
| Network capture transceivers |
2 x 10 Gb Short Range fiber Transceivers (Avago AFBR-703SDZ or AFBR-709SMZ) 2 x 1 G TX RJ-45 Transceivers (Avago ABCU-5710RZ or ABCU-5740RZ) 2 x 1 G SX LC Transceivers (Avago AFBR-5715PZ) Use these transceivers with the network packet capture card, labeled as [2] in the appliance diagram. |
| Network management transceivers |
2 x 10 GbE Short Range SFP+ The transceivers can have one of the following part numbers:
Use these transceivers with the 2 x 10 GbE SFP+ ports, labeled as [4] in the appliance diagram. |
| Ports |
Network Packet Capture (SFP/SFP+) ports (Model NT40E3-4) 4 x 1 Gb Ethernet ports 1 x RJ-45 10/100/1000 Mb Ethernet systems management (IMM) port 2 x 10 GbE SFP+ ports |
| Storage | 2 x 240 GB SATA 2.5" SSD, 480 GB Total (RAID1) OR2 x 200 GB SATA 2.5" SSD, 400 GB Total (RAID1) The storage is labeled as [1] in the appliance diagram. |
| Memory | 128 GB (8 x 16 GB DDR4 2400 MHz) |
| Traffic | 10 Gbps |
| Power | Dual redundant 900-Watt AC power supply |
| Dimensions | 29.5 inches deep x 17.6 inches wide (19 inches with EIA) x 3.4 inches high |
System performance of QRadar Network Insights appliances varies depending on the exact configuration and tuning of the system components. It is influenced not only by hardware, but also factors such as the search, extraction criteria, and the amount of network data. For more information, see Performance impacts in the IBM QRadar Network Insights Installation Guide.
| Label | Description |
|---|---|
| 1 | QRadar Firmware Storage |
| 2 | Network Packet Capture (SFP/SFP+) |
| 3 | IMM Port (1GbE TX) |
| 4 | Management ports (10 GbE SFP+) |
| 5 | Cabled internally. Do not use these ports. |
| 6 | Management ports (1 GbE TX) |
For battery removal steps, see Removing the coin-cell battery (also called CMOS battery) (http://publib.boulder.ibm.com/infocenter/systemx/documentation/index.jsp?topic=/com.lenovo.sysx.8871.doc/t_removing_system_battery.html)
For more information about the front panel, see Front view (http://publib.boulder.ibm.com/infocenter/systemx/documentation/index.jsp?topic=/com.lenovo.sysx.8871.doc/c_front_view.html).
For more information about the back panel, see Rear view (http://publib.boulder.ibm.com/infocenter/systemx/documentation/index.jsp?topic=/com.lenovo.sysx.8871.doc/c_rear_view.html).
For more information, you can also see System x3650 M5 (https://lenovopress.com/lp0068-lenovo-system-x3650-m5-machine-type-8871.html).