NetWitness® Concentrator and Broker are high performance Linux-based network appliances that extend the reach of NetWitness NextGen™ across your entire enterprise, and facilitate real-time and historical reporting and alerting. For the first time, comprehensive network and application layer detail can be aggregated and analyzed across multiple capture locations and made available to NextGen’s analytic applications, Informer and Investigator. NetWitness Concentrators aggregate clusters of NetWitness® Decoders in real-time, and NetWitness Broker provides a real-time, single, hierarchical enterprise view across your entire network. NetWitness® Live, fully integrated in the NetWitness infrastructure, provides users full content analysis of network threat intelligence from multiple, globally-distributed threat intelligence sources.

NetWitness Concentrator is designed to aggregate data hierarchically for ultimate scalability and deployment flexibility across various organization-specific network topologies and infrastructures. As a result, Concentrators can be tiered in deployments to give visibility into multiple capture locations.

NetWitness Broker also is designed to operate hierarchically; however, its function is to broker queries across an entire enterprise deployment. Broker provides a single point of access to NextGen data and is designed to operate and scale in any network environment, independent of network latency, throughput, or data volume.

Concentrator and Broker are fully compatible with all NetWitness analytical products. For more advanced applications, users can leverage NextGen’s available API/SDK to build organizational-specific applications which utilize the NetWitness NextGen™ infrastructure.

Product Features:

• Supports 10G infrastructures
• Supports NetWitness® Live
• 64-bit Linux-based, modular and fully upgradeable hardware platform across the entire product line
• Easily aggregate multiple NetWitness® Decoder collection systems
• Deploy a single enterprise analysis point with Broker
• Manage and configure appliances from a single point
• Indefinitely scales your collection infrastructure upon a distributed, highly manageable, real-time framework.
• Expandable SAS storage capacity & supports SAN solutions
• Available API/SDK for custom application development
• Supports RSA SecurID and LDAP authentication

NetWitness® Appliance Models:

Product	SKU	Interface	Storage	Rack Unit	Power	Weight
Broker	NWA 100-8b	Two copper Ethernet 100/1000	2TB Total Storage. Redundant	1 U x 16.8" (W) x 14" (D) x 1.75" (H)	260 W, stand alone 120/240V autoswitch	25 lbs
Concentrator	NWA 400-16c	Two copper Ethernet 100/1000	4TB Total Storage. Not Redundant	1 U x 17.2" (D) x 25.6" (H) x 1.7" (W)	560 W, stand alone 120/240V autoswitch	38lbs
Concentrator	NWA 1200-32c *	Two copper Ethernet 100/1000 Or two fiber Ethernet 1000	12TB Total Storage. Redundant with hotswap.	2 U x 17.6" (D) x 27.75" (H) x 3.44" (W)	850 W,Dual Redundant 120/240V autoswitch	66lbs

All appliances are UL, FCC, and CE approved & RoHS Compliant.
*Also VCCI approved.

Call 703-889-8950 or contact sales@netwitness.com for more information about NetWitness® Concentrator and other NetWitness NextGen™ products.