Network sensor
For XDR to process and correlate network traffic data you need to install and configure the Network sensor in your environment. To do so, you need to meet the following requirements:
Hardware
The default configuration for the Network sensor virtual appliance requires 2 CPU and 2 GB RAM.
Table 1. Required RAM (GB) and CPU
Memory | CPU | Processed throughput |
|---|---|---|
2 GB | 2 x 2 GHz | 5 Gb |
2 GB | 2 x 1 GHz | 2.5 Gb |
2 GB | 2 x 0.5 GHz | 1 Gb |
Note
All results have been recorded with a Network probe, a client and a server inside a network. The client generates 12 GB traffic to the server. The PCAP drop is ~2-3% for all setups.