Skip to main content

Network sensor

For XDR to process and correlate network traffic data you need to install and configure the Network sensor in your environment. To do so, you need to meet the following requirements:


The default configuration for the Network sensor virtual appliance requires 2 CPU and 2 GB RAM.

Table 1. Required RAM (GB) and CPU



Processed throughput

2 GB

2 x 2 GHz

5 Gb

2 GB

2 x 1 GHz

2.5 Gb

2 GB

2 x 0.5 GHz

1 Gb


All results have been recorded with a Network probe, a client and a server inside a network. The client generates 12 GB traffic to the server. The PCAP drop is ~2-3% for all setups.