You can run the RSA NetWitness
UEBA standalone installation as follows:
-
RSA Physical Hosts (software running on hardware supplied by RSA)
-
Install physical hosts and connect to the network as described in the RSA NetWitness
Platform Hardware Setup Guides and the RSA NetWitness Platform Physical Host Installation Guide. -
Set up licensing for NetWitness Platform as described in the RSA NetWitness
Platform Licensing Guide.
-
-
On-Premises (On-Prem) Virtual Hosts (Software Only provided by RSA)
Physical Host Hardware Specifications
You must install the NetWitness UEBA host on the S5 (Dell R630) or S6 (Dell R640) hardware.
SERIES 5 (DELL R630) SPECIFICATIONS
* NIC Card options are available for swap with on-board daughter card or add on.
Virtual Host Specifications
Following is the recommended system requirements for a UEBA virtual host.
Note: RSA recommends that you only deploy UEBA on a virtual host if your log collection volume is low. If you have a moderate to high log collection volume, RSA recommends that you deploy UEBA on the physical host.
Installation Media
Installation media are in the form of OVA packages, which are available for download and installation from Download Central (https://download.rsasecurity.com). As part of your order fulfillment, RSA gives you access to the OVA.
