QRadar Network Insights 1920-C

The IBM® QRadar® Network Insights 1920-C (MTM 4531-F3F) appliance provides detailed analysis of network flows to extend the threat detection capabilities of IBM QRadar.

The appliance has two Napatech cards, each with four ports. By default, the four ports on the first network capture card are configured for inbound traffic from the network tap. If the appliance is included in a stack, the ports are reconfigured for 2 inbound and 2 outbound. For more information about cabling stacked appliances, see the IBM QRadar Network Insights Installation and Configuration Guide.

The second Napatech card is cabled internally for load balancing and cannot not be used. If you use these ports when you cable the appliance, you do not get any data.

The following table shows the hardware information and requirements for the IBM QRadar Network Insights 1920-C (MTM 4531-F3F) appliance:

Table 1. QRadar Network Insights 1920-C overview
Description Value
Dimensions 26.92 inches deep x 17.49 inches wide x 3.44 inches high
Power Dual redundant 750 Watt AC power supply
Storage 2x 200 GB SSD (Raid 1)

The storage is labeled as [1] in the appliance diagram.
Memory 128 GB (8 x16 GB DDR4 2400MHz)
Network capture transceivers 2x 10Gb Short Range Fiber Transceivers (Avago AFBR-703SDZ or AFBR-709SMZ)

2x 1G TX RJ-45 Transceivers (Avago ABCU-5710RZ or ABCU-5740RZ)

2x 1G SX LC Transceivers (Avago AFBR-5715PZ)

Use these transceivers with the network packet capture card, labeled as [2] in the appliance diagram.
Network management transceivers 2x 10G Short Range SFP
The transceivers may have one of the following part numbers:
  • Avago AFBR-709SMZ-IB8
  • Finisar FTLX8571D3BCL-BN
  • BNT BN-CKM-SP-SR

Use these transceivers with the management ports, labeled as [4] in the appliance diagram.

System performance of QRadar Network Insights appliances varies depending on the exact configuration and tuning of the system components. It is influenced not only by hardware, but also factors such as the search, extraction criteria, and the amount of network data. For more information, see Performance impacts in the IBM QRadar Network Insights Installation and Configuration Guide.

Figure 1. Back panel of the QRadar Network Insights 1920-C appliance
Image showing the back and front panels of the QRadar network Insights 1920-C appliance.
Table 2. Legend for use with the QRadar Network Insights 1920-C image
Label Description
1 QRadar Firmware Storage
2 IMM Port (1GbE TX)
3 Cabled internally. Do not use these ports.
4 Management ports (10 GbE SFP+)
5 Management ports (1 GbE TX)
6 Network Packet Capture (SFP/SFP+)