StealthWatch FlowReplicator

Easily Replicate NetFlow, IPFIX, sFlow, Syslog or SNMP

Free Trial click here to try it now

The StealthWatch FlowReplicator is a high-speed, high-performance appliance that receives essential network and security information from multiple locations, and then forwards it in a single data stream to one or more destinations, such as the StealthWatch FlowCollector. By aggregating and providing a single, standardized destination for NetFlow, IPFIX, sFlow, Syslog and SNMP information, the FlowReplicator greatly simplifies the integration of multiple types of network and security data within large enterprises. The FlowReplicator can receive data from any connectionless UDP application, and then retransmit it to multiple destinations, duplicating the data if required. A Detailed Flow Statistics feature within the FlowReplicator also enables organizations to estimate the flows per second (fps) within their environment to help determine their monitoring requirements.

Key Benefits

Point log data (NetFlow, IPFIX, sFlow, Syslog, SNMP) to a single destination without the need to reconfigure the infrastructure when new tools are added/removed.

  • Simplify network and security monitoring
  • Ease network device configuration
  • Streamline change management
  • Reduce change management risk

Read the StealthWatch FlowReplicator datasheet or watch a video on the FlowReplicator.

Simplify the Collection of Network and Security Data Across the Enterprise

The StealthWatch FlowReplicator is a high-speed, high-performance appliance that receives essential network and security information from multiple locations, and then forwards it in a single data stream to one or more destinations, such as the StealthWatch FlowCollector. It is available as a physical or virtual appliance. By aggregating and providing a single, standardized destination for NetFlow, sFlow, Syslog and SNMP information, the FlowReplicator greatly simplifies the integration of multiple types of network and security data within large enterprises. The FlowReplicator can receive data from any connectionless UDP application, and then retransmit it to multiple destinations, duplicating the data if required.

Supports Any Connectionless UDP Application

  • NetFlow records sent from multiple routers can be replicated to several different NetFlow collectors, eliminating the need for a multitude of NetFlow destination specifications in the NetFlow exporter configuration.
  • sFlow samples sent from several routers and switches can be replicated to multiple sFlow collectors. As with the NetFlow example, this use removes the need for multiple sFlow destination specifications in the sFlow exporter configuration.
  • Syslog messages can be automatically replicated to multiple Syslog collectors.
  • SNMP traps from routers, switches and other network devices can be automatically collected and distributed to several different SNMP management stations.
 

FR 1000*

FR 2000*

Packet Replication Rate (input)*

25,000 pps**

37,500 pps**

Packet Replication Rate (output)*

50,000 pps**

75,000 pps**

Network

 

  • Management Port — 1; 10/100/1000 Copper
  • 1 Monitor/Listening Port
  • Integrated HTTPS Web-UI; Serial and KVM access to CLI

 

 

  • Management/Forwarding Port — 1; 10/100/1000 Copper
  • 3 Monitor/Listening Ports
  • Optional: 2 add-on Gigabit optical fiber single-port NICs

 

Storage

160 GB, non-redundant

146 GB, RAID-6, redundant

Hardward Platform R210II R620
Hardward Generation 11Gv2 12G

Rack Units (Mountable)

1U

Power

Single: 250 W

Redundant 750W AC, 50/60 Hz
Auto Ranging (100V to 240V)

Heat Dissipation

1,039 BTU/hour maximum

2,891 BTU/hour maximum
Operating System Hardened Linux

Dimensions

Height: 1.67 in. (4.24 cm)
Width: 17.09 in. (43.4 cm)
Depth: 15.5 in. (39.37 cm)

Height: 1.68 in. (4.3 cm)
Width: 18.99 in. (48.24 cm) with rack latches
17.08 in. (43.4 cm) without rack latches
Depth: 29.25 in. (74.3 cm) with power supplies and bezel
27.25 in. (69.2 cm) w/o power supplies and bezel

Unit Weight

~17.77 lbs (8.058 kg)

41 lbs (18.6 kg)

Rails

Rack Chassis with Versa Rail, round holes for 3rd-party racks

Sliding Ready Rails with Cable Management Arm

Regulatory

  • FCC (U.S. only) Class A
  • DOC (Canada) Class A
  • CE Mark (EN55022 Class A, EN55024, EN61000-3-2, EN 61000-3-3, EN60950)
  • VCCI Class A
  • UL 1950
  • CSA 950

Please contact sales@lancope.com for a detailed list.

*Specs for StealthWatch v6.5
**Packets per second, sustained

The FlowReplicator Virtual Edition (VE) is designed to perform the same function as the appliance editions, but in a VMware environment. The following table shows the minimum resource requirements for the FR VE to operate. However, the FR VE scales dynamically based on the resources allocated to it. Therefore, for the FR VE to operate effectively, be sure to allocate resources so that they are reserved for the FR VE and not shared with any other virtual machines.

FlowReplicator VE

Packet Replication Rate (input)*

15,000 pps

Packet Replication Rate (output)*

30,000 pps

Minimum Requirements

 

  • 1 virtual CPU
  • 3 GHz
  • 1 GB Ram

 

Operating System

Hardened Linux

Note: More details can be found in the StealthWatch System Capacities & Sizing Guidelines. Contact Sales or a Lancope partner for the document.