Call a Specialist Today! 800-886-5369

Vectra Virtual Sensors
The Cognito Automated Threat Detection and Response Platform

 

Vectra Products
Vectra Software
Vectra Virtual Sensor
Contact us for Pricing!

Click here to jump to more pricing!

Overview:

Virtual Sensors

Virtual sensors, known as vSensors, run in VMware ESXi 5.0 or later, making it easy to extend Cognito threat detection coverage across the physical network and into virtualized data centers.

The vSensors can connect to any VMware vSwitch in the data center to provide visibility into all traffic and detect threats that pass between workloads in the virtual environment. Cognito also integrates with VMware vCenter so it has authoritative, always up-to-date views of the virtual environment.

Cognito Artificial Intelligence Platform

The Cognito automated threat detection and response platform from Vectra provides full visibility into cyber attack behaviors from cloud and data center workloads to user and IoT devices. Regardless of size or geographic spread, Cognito provides consistent threat detection coverage with no blind spots, leaving attackers with nowhere to hide.

Cognito has a brain and multiple sensors that provide input to the brain. The brain, which runs on the X-series appliance, receives input from S-series sensors. S-series sensors can be physical or virtual and receive input from third-party sources in the form of logs from security products, authentication systems, SaaS applications or indicators of compromise.

Because Cognito uses artificial intelligence, it automatically analyzes, triages, correlates and prioritizes threats across an enterprise in real-time, reducing the security-analyst workload by 29x.

To extend the reach of Cognito, S-series sensors are easily deployed at remote sites or with access switches on internal network segments. They passively monitor network traffic, extract critical metadata and forward it to the brain for analysis and threat detection.

S-series sensors can be deployed in-line as a bump-in-the-wire that fails-open or on a SPAN port or network TAP. The small size and simple deployment model of S-series sensors ensure that there is comprehensive coverage across the entire network, especially at remote offices, clinics and retail locations.

For network locations where scalable sensors are required, the X-series appliance can be deployed as a sensor for the brain. As a sensor, the X-series is deployed on a SPAN port or network TAP.

Algorithms:

FIPS 140-2 Validated

FIPS-Approved Algorithms:

  • AES (Cert. #2273)
  • HMAC (Cert. #1391)
  • DSA (Cert. #709); ECDSA (Cert. #368)
  • RSA (Cert. #1166)
  • SHS (Cert. #1954)
  • Triple-DES (Cert. #1420)
  • DRBG (Cert. #281)
  • CVL (Cert. #44)
  • RNG (Cert #1132)

Other Algorithms:

  • RSA (key wrapping)
  • Key establishment methodology provides between 112 and 256 bits of encryption strength
  • Non-compliant less than 112 bits of encryption strength
  • EC Diffie-Hellman key agreement
  • Key establishment methodology provides between 112 and 256 bits of encryption strength
  • Non-compliant less than 112 bits of encryption strength

Specifications:


  400 Mbps 1 Gbps 2 Gbps 5 Gbps
Throughput
  • 2 virtual CPU cores
  • 8 GB RAM
  • 100 GB disk space
  • 4 virtual CPU cores
  • 8 GB RAM
  • 150 GB disk space
  • 8 virtual CPU cores
  • 16 GB RAM
  • 150 GB disk space
  • 16 virtual CPU cores
  • 64 GB RAM
  • 600 GB disk space
Requirements
  • VMware ESXi 5.0 or later
  • Intel or AMD CPUs supporting SSE3 and SSE4
  • Two network interfaces

Documentation:

Download the Vectra Cognito Platform Specifications Datasheet (.PDF)

Pricing Notes:

Vectra Products
Vectra Hardware
Vectra X80 Appliance
Contact us for Pricing!