Virtual Packet Capture Appliance (Support for Azure, ESXi, KVM, and AMI)
Engineered for professionals who demand the best in performance, security, and design.
Capture and index network packets with time stamping and connection attributes at recording speeds up to 20 Gbps.
Consolidate alerts from other Trellix and third-party products along with all network metadata in a single workbench with immediate “one click” pivot to session data.
View and share specific network metadata and activity through easy-to-create custom dashboards and search web, email, FTP, DNS, chat, SSL connection details, and file attachments.
Hunt for anomalies or malicious, suspicious, or risky activities that may have evaded detection by your existing tools.
Search and retrieve target connections and packets quickly and conduct centralized application-level keyword, regex, and wildcard queries across all alerts, captured flow, and metadata.
Scale deployments across premises, hybrid and cloud environments to meet distributed and large enterprise requirements.
Accelerate the network forensics process with a single workbench that simplifies investigations and remediates attacks.
Reveal hidden threats and accelerate incident response by reviewing specific network packets and sessions before, during, and after an attack.
Full specifications for the model
| SKU | PX-VA | ||
|---|---|---|---|
| Category | Minimum requirements | Recommended requirements | Performance requirements |
| Cpu Cores | 4 CPU Cores | 8 CPU Cores | 16 CPU Cores |
| Memory | 16 GB RAM | 32 GB RAM | 64 GB RAM |
| Network Interface Controllers | A dedicated NIC for management, A dedicated NIC for packet capture | A dedicated NIC for management, A dedicated NIC for packet capture | A dedicated NIC for management, A dedicated NIC for packet capture |
| Hard Drives | 80 GB hard drive for the Linux OS, 200 GB hard drive for captured data | 80 GB hard drive for the Linux OS, 200 GB hard drive for captured data | 80 GB hard drive for the Linux OS, 200 GB hard drive for captured data |
| Approximate Capture Rates | 25 Mbps (with a limited number of rules) | 100 Mbps (with standard device limitations) | 1,000 Mbps (with standard device limitations) |
Download product documentation and resources
Explore other configurations and models that might suit your needs.
Recommended
#Trellix-Network-forensics
Recommended
#PX1004S-6
Recommended
#PX2060ESS-96
Our team of experts is ready to help you find the perfect solution for your business needs. Get personalized advice and competitive quotes.
We're here to help with any questions
