Easily Replicate NetFlow, IPFIX, sFlow, Syslog or SNMP

Simplify the Collection of Network and Security Data Across the Enterprise

The StealthWatch FlowReplicator is a high-speed, high-performance appliance that receives essential network and security information from multiple locations, and then forwards it in a single data stream to one or more destinations, such as the StealthWatch FlowCollector. It is available as a physical or virtual appliance. By aggregating and providing a single, standardized destination for NetFlow, sFlow, Syslog and SNMP information, the FlowReplicator greatly simplifies the integration of multiple types of network and security data within large enterprises. The FlowReplicator can receive data from any connectionless UDP application, and then retransmit it to multiple destinations, duplicating the data if required.

Supports Any Connectionless UDP Application

• NetFlow records sent from multiple routers can be replicated to several different NetFlow collectors, eliminating the need for a multitude of NetFlow destination specifications in the NetFlow exporter configuration.
• sFlow samples sent from several routers and switches can be replicated to multiple sFlow collectors. As with the NetFlow example, this use removes the need for multiple sFlow destination specifications in the sFlow exporter configuration.
• Syslog messages can be automatically replicated to multiple Syslog collectors.
• SNMP traps from routers, switches and other network devices can be automatically collected and distributed to several different SNMP management stations.

	FR 1000	FR 2000
Packet Replication Rate (input)*	25,000 pps	37,500 pps
Packet Replication Rate (output)*	50,000 pps	75,000 pps
Network	Management Port — 1; 10/100/1000 Copper 1 Monitor/Listening Port Integrated HTTPS Web-UI; Serial and KVM access to CLI	Management/Forwarding Port — 1; 10/100/1000 Copper 3 Monitor/Listening Ports Optional: 2 add-on Gigabit optical fiber single-port NICs
Storage	160 GB, Non-redundant	146 GB, RAID-6, redundant
Rack Units (Mountable)	1U
Power	Single power supply (250 W)	Redundant 750W AC, 50/60 Hz Auto Ranging (100V to 240V)
Heat Dissipation	1039 BTU/hour maximum	2,891 BTU/hour maximum
Operating System	Hardened Linux
Dimensions	Height: 1.67 in. (4.24 cm) Width: 17.09 in. (43.4 cm) Depth: 15.5 in. (39.37 cm)	Height: 1.68 in. (4.3 cm) Width: 18.99 in. (48.24 cm) with rack latches 17.08 in. (43.4 cm) without rack latches Depth: 29.25 in. (74.3 cm) with power supplies and bezel 27.25 in. (69.2 cm) w/o power supplies and bezel
Unit Weight	~17.77 lbs (8.058 kg)	41 lbs (18.6 kg)
Rails	Rack Chassis with Versa Rail, round holes for 3rd-party racks	Sliding Ready Rails with Cable Management Arm
Regulatory	FCC (U.S. only) Class A DOC (Canada) Class A CE Mark (EN55022 Class A, EN55024, EN61000-3-2, EN 61000-3-3, EN60950) VCCI Class A UL 1950 CSA 950 Please contact sales@lancope.com for a detailed list.

The FlowReplicator Virtual Edition (VE) is designed to perform the same function as the appliance editions, but in a VMware environment. The following table shows the minimum resource requirements for the FR VE to operate. However, the FR VE scales dynamically based on the resources allocated to it. Therefore, for the FR VE to operate effectively, be sure to allocate resources so that they are reserved for the FR VE and not shared with any other virtual machines.

FlowReplicator VE
Packet Replication Rate (input)*	15,000 pps
Packet Replication Rate (output)*	30,000 pps
Minimum Requirements	1 virtual CPU 3 GHz 1 GB Ram
Operating System	Hardened Linux

Note: More details can be found in the StealthWatch System Capacities & Sizing Guidelines. Contact Sales or a Lancope partner for the document.