Stacked QRadar Network Packet Capture appliances

You can extend the storage available for capture data by connecting multiple QRadar® Network Packet Capture appliances together in a ring topology to create a stack.

The stack allows the distribution of capture data across each of the connected appliances. It can connect up to 16 devices, but appears and behaves like a single entity that captures data from one TAP of a single 10GB port.

Stack Controller

The Stack Controller is the appliance that receives the traffic that is being monitored, also known as the TAP point. The Stack Controller manages the overall configuration for the stack, therefore, there can be only one controller in each stack.

Stack Node

The Stack Node is the appliance that is used as storage for the capture data. You can have up to 15 nodes in a stack.