UEBA Install: System Requirements

Document created by RSA Information Design and Development on Apr 11, 2019•Last modified by RSA Information Design and Development on Apr 11, 2019
Version 3Show Document
  • Comment • 0
  • View in full screen mode
  

You can run the RSA NetWitness® UEBA standalone installation as follows:

  • RSA Physical Hosts (software running on hardware supplied by RSA)

    • Install physical hosts and connect to the network as described in the RSA NetWitness® Platform Hardware Setup Guides and the RSA NetWitness® Platform Physical Host Installation Guide.

    • Set up licensing for NetWitness Platform as described in the RSA NetWitness® Platform Licensing Guide.

  • On-Premises (On-Prem) Virtual Hosts (Software Only provided by RSA)

Physical Host Hardware Specifications

You must install the NetWitness UEBA host on the S5 (Dell R630 appliance) hardware.

SERIES 5 (DELL R630) SPECIFICATIONS

                                                                                       
SpecificationCapacity
ModelDell PowerEdge R630xl
Processor TypeIntel Xeon E5 -2680v3

Processor Speed

Cache

Number of Cores

Number of Processors

Number of Threads

2.5 GHz

30MB

12

2

24

Total Memory256GB

Internal Disk Controller

Dell PERC H730

External Disk ControllerDell PERC H830

SAN Connectivity (HBA) - Optional

N/A

Remote Management CardiDRAC8 Enterprise

Drives

Total - 6 Drives

2 x 1TB, 2.5" HDD

4 x 2TB, 2.5" HDD

Chassis1U

Weight

18.4 kg (40.5 lbs)

NIC Card*

On Board

2 x 10 Gb Copper

2 x 10 Gb & 2 x 1Gb Copper

(Other options are available)

Dimensions

H: 4.28 cm (1.68 in.) x

W: 48.23 cm (18.98 in.)

x D: 75.51 cm (29.72 in.)

Power1100W Redundant

BTU/hr

4100 BTU/hr (max)

Amps (Spec)1100W / 220VAC = 5A

Actual Amp Draw (Post Startup)

2.1 Amps

Events Per Second (EPS)100K EPS

Throughput

N/A

* NIC Card options are available for swap with on-board daughter card or add on.

Virtual Host Specifications

Following is the recommended system requirements for a UEBA virtual host.

                     
CPUMemoryRead IOPSWrite IOPS
16 or 2.4GHz64 GB500 500

Note: RSA recommends that you only deploy UEBA on a virtual host if your log collection volume is low. If you have a moderate to high log collection volume, RSA recommends that you deploy UEBA on the physical host.

Installation Media

Installation media are in the form of OVA packages, which are available for download and installation from Download Central (https://download.rsasecurity.com). As part of your order fulfillment, RSA gives you access to the OVA.

You are here
Table of Contents > System Requirement

Attachments

    Outcomes