System Requirements

Preconfigured Hardware Systems

genua provides dedicated hardware systems for cognitix Threat Defender.

cTD hardware

cognitix Threat Defender S and M/L appliances

These systems have the following technical specifications:

System

Mainboard

CPU

RAM

NICs (default)

Threat Defender S

Supermicro A2SDi-TP8F

Intel Atom C3858 12C/12T - 2.0Ghz

4x 8GB DDR4 2400MHz ECC

4x 1GbE RJ45 (i350-AM4), 2x 10GbE RJ45 (X557-AT2), 2x 10GbE SFP+ (CS4227)

Threat Defender M

Supermicro H12SSW-iN

AMD EPYC 7272 12C/24T - 2.9-3.2GHz

8x 16GB DDR4 3200MHz ECC

2x 1GbE RJ45 (BCM5720L), 4x 1GbE RJ45 (i350-T4)

Threat Defender L

Supermicro H12SSW-iN

AMD EPYC 7402 24C/48T - 2.8-3.35GHz

8x 32GB DDR4 3200MHz ECC

2x 1GbE RJ45 (BCM5720L), 4x 1GbE RJ45 (i350-T4)

For additional information, see the hardware datasheets.

Other Hardware Systems

While we recommend using the dedicated hardware provided by genua, cognitix Threat Defender is also available as a software-only solution that you can install on your own hardware. To be able to use Threat Defender, your system has to meet the following hardware requirements.

CPU

  • Intel CPU with SSE 4.2

  • Minimum of 4 threads, for example

  • Maximum of 512 threads

  • Maximum of 8 NUMA nodes (CPU sockets)

RAM

  • Minimum of 8GB

  • Recommended 16GB or more

  • Recommended 2GB per CPU core

  • Minimum of 8GB per NUMA node

  • Equal amount of memory on all NUMA nodes

Note

Threat Defender uses DPDK to accelerate processing. DPDK can address a maximum of 512GB RAM. There may be problems if you use considerably larger amounts of RAM.

Network Interface Cards

  • Minimum of 3 network interfaces in total

  • Minimum of 2 network interfaces with Intel chipset. If you wish to use chipsets from other vendors, contact support@cognitix.de.

    cognitix Threat Defender supports the following Intel chipsets:

    • Intel 1G: 82575, 82576, 82580, I210, I211, I350, I354

    • Intel 10G: 82598, 82599, X540, X550, X552/X557 (Niantic)

    • Intel 10G/40G: X710 (Fortville)

  • Maximum of 32 Ethernet ports

  • To achieve optimum performance on an Intel platform, use an Intel Xeon class server system such as Ivy Bridge, Haswell or newer.

  • Make sure each NIC has the latest version of NVM firmware.

  • Use PCIe Gen3 slots, such as Gen3 x8 or Gen3 x16, because PCIe Gen2 slots do not provide enough bandwidth for 2 x 10GbE and above.

Disk

  • SSD recommended

  • Minimum of 32GB

  • Recommended 120GB

Installation

  • Via bootable USB device

  • The system has to support UEFI

Warning

To be able to get firmware and license updates, the management interface of Threat Defender has to be able to reach our servers via the Internet. If you do not want to connect Threat Defender to the Internet, you need to update it manually (see Updates).