Intellectual property. High-value data. Hybrid cloud infrastructure. It all adds up to a lot of vulnerabilities — and makes your company a prime target for nation-state cyberattacks. But with Attack Signal Intelligence from Vectra AI, your analysts easily keep data breaches at bay.
No items found.
Gain real-world insight into the anatomy of an attack.
Join our ensemble of security researchers, data scientists and analysts as we share over 11+ years of security-AI research and expertise with the global cybersecurity community. Through our webinars and hands-on labs, you’ll learn how to effectively leverage AI for threat detection and response and expose sophisticated attacks hiding in your environment.
Included in your Vectra AI subscription, software updates with new threat detection algorithms are delivered to your system on a regular basis to ensure continuous protection from the latest advanced threats.
To extend the reach of Vectra AI, X-Series and S-series Sensors are easily deployed at remote sites or with access switches on internal network segments. They passively monitor network traffic, extract critical metadata and forward it to Vectra for analysis and threat detection. Sensors can be deployed out-of-band on a SPAN port, network TAP, or packet broker.
Virtual Sensors
Virtual Sensors, known as vSensors, run in VMware ESXi, Microsoft Hyper-V, and KVM, making it easy to extend Vectra threat detection coverage across the physical network and into virtualized data centers. VMware vSensors support both VSS and VDS VMware switch types to provide visibility into all traffic and detect threats that pass between workloads in the virtual environment. Vectra AI also integrates with VMware vCenter so it has authoritative, always up-to-date views of the virtual environment.
Physical Appliance Performance
Appliances
MGT Interfaces
Capture Ports
Paired Sensors
Sensor Mode Performance
Mixed Mode Performance
Brain Mode Performance
X29
2 x 10/100/1000 Copper Interfaces or 1 x 10Gbps SFP+ Interface
2 x 1 GbE 2 x 10 Gb SFP+
150
15 Gbps
8 Gbps
20 Gbps
S11
2 x 10/100/1000 Copper Interfaces
2x1 GbE
N/A
2Gbps
N/A
N/A
S101
2 x SFP+ Interfaces (included in purchase, model selected by customer)
2 x 10G SFP+ and 2 configurable to: SFP28 (10/25 G) or QSFP (40 G) or QSFP28 (100 G)
N/A
50 Gbps
N/A
N/A
B101
2 x SFP+ Interfaces (included in purchase, model selected by customer)
N/A
500
N/A
N/A
75 Gbps
Notes regarding performance chart above:
Paired Sensors – Refers to how many Sensors (physical, virtual, or cloud) an appliance can pair with.
N/A – Refers to unsupported modes. For example, an S11 cannot be used as a Brain, therefore the only relevant metric for an S11 is the performance in Sensor mode.
Performance – Refers to the amount of network traffic observed by Sensors that a Sensor can produce metadata for, or the amount of traffic observed by Sensors that a Brain can process metadata for. The performance numbers are based upon average throughput a given Sensor/Brain can process. Actual performance may vary depending on traffic composition. Please contact Vectra AI to discuss further.
10Gbps management Interface supported in 6.19 or later. Consumes one of the 10Gbps traffic interfaces to operate as a management interface
AOS Version: 5.20.3.5 or later AHV Version 2021105.2267 or later
2
8 GB
100 GB
500 Mbps
Nutanix
AOS Version: 5.20.3.5 or later AHV Version 2021105.2267 or later
4
8 GB
150 GB
1 Gbps
Nutanix
AOS Version: 5.20.3.5 or later AHV Version 2021105.2267 or later
8
16 GB
150 GB
2 Gbps
Nutanix
AOS Version: 5.20.3.5 or later AHV Version 2021105.2267 or later
16
64 GB
500 GB
5 Gbps
Cloud - IaaS Deployment
Brain Deployment
Hypervisor
VM Type
Cores
Memory
Storage (OS, Data, Data, Data) in GB
Paired Sensors
Tracked Hosts
Performance
AWS
r5d.2xlarge
8
64 GB
256, 64, 128, 256
15
50,000
2 Gbps
AWS
r5d.4xlarge
16
128 GB
256, 64, 128, 256
25
50,000
5 Gbps
AWS
r5d.8xlarge
32
256 GB
256, 64, 128, 256
100
150,000
15 Gbps
AWS
r5d.16xlarge
64
512 GB
256, 64, 512, 512
500
500,000
50 Gbps
Azure
Standard_E16s_v3
16
128 GB
256, 64, 128, 256
25
50,000
5 Gbps
Azure
Standard_E32s_v3
32
256 GB
256, 64, 128, 256
100
150,000
15 Gbps
vSensor Deployment
Hypervisor
VM Type
Cores
Memory
Storage (OS, Data) in GB
Performance
AWS
r5(n).large *
2
16 GB
50, 128
1 Gbps
AWS
r5(n).large *
4
32 GB
50, 128
2 Gbps
AWS
r5(n).2xlarge *
8
64 GB
50, 512
4 Gbps
AWS
r5(n).4xlarge *
16
128 GB
50, 512
8 Gbps
AWS
c5n.18xlarge *
72
192 GB
50, 128 (No PCAP capability) *
Up to 10 Gbps *
Azure
Standard_DS11_v2
2
14 GB
50, 128
1 Gbps
Azure
Standard_DS3_v2
4
14 GB
50, 128
2 Gbps
GCP
e2-standard-2
2
8 GB
50, 128
1 Gbps
GCP
e2-standard-4
4
16 GB
50, 128
2 Gbps
AWS vSensor configurations include both “n” and non “n” r5 instance types. - Networking performance is quoted as “up to 10Gbps” on the r5 instances by AWS and can be influenced by neighboring instances allocated to the same physical hardware in AWS. - Networking performance is quoted as “up to 25Gbps” on the r5n instances by AWS. These instances are still shared with neighbors but are optimized by AWS to have higher overall network throughput. - Customers can work with AWS to utilize dedicated instances and distribute instances to provide the required networking throughput to their vSensor instances on that dedicated hardware.
The c5n.18x large vSensor instance type does not have a rolling capture buffer and can therefore not support PCAP generation for Detections that originate from traffic that is processed by those instances.
Due to variability in customer cloud network configurations and how mirroring may configured, it is not possible to guarantee performance on any instance with more than 2 cores (numbers are approximate and based on even distribution of packets across threads). Please contact Vectra to discuss further.
If using port mirroring via VXLAN, please contact Vectra AI to discuss performance.
Trusted by experts and enterprises worldwide
FAQs
Challenge
Solution
Customer benefits
How other organizations are partnering with Vectra AI
