IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  QNI virtual appliance installations

    Posted Mon November 15, 2021 01:22 AM
    Reply
    Dear All,

    hope you are doing well. I have a question regarding the QNI virtual appliance installations, should we use specific network interface cards (for packet capture) on the hardware? Because on the documentation, there is no detailed information about the network adapter specifications (https://www.ibm.com/docs/en/qsip/7.4?topic=appliance-system-requirements-virtual-appliances) but if we see the requirements on QNI software installation on our own appliance there are some recommendations for the network interface card (Prerequisites for installing QRadar Network Insights on your own appliance).

    maybe in this group, there is someone who had experience with the QNI virtual appliance installations. Thank you

    ------------------------------
    Davin Ardian
    ------------------------------


  • 2.  RE: QNI virtual appliance installations

    Posted Tue November 16, 2021 04:52 PM
    Reply
    Hello Davin, when QNI installing on VMware there really isn't anything special you will need to pick. A standard VMXNET3 network interface inside VMware can be used for monitoring by QNI.

    ------------------------------
    Dale Bowie
    QRadar Network Insights and Incident Forensics Product Owner
    IBM
    ------------------------------

    Original Message


  • 3.  RE: QNI virtual appliance installations

    Posted Tue November 16, 2021 07:13 PM
    Reply
    Hi Dale Bowie,

    Well noted, thank you for the information. One more question, based on the QNI documentation installations on VMware requires at least two network adapters, one network adapter for network capture. if we have selected one of the following network interface cards to capture the network: Napatech NT40E3, Intel x520, and Intel x710, no problem right?

    Thank you

    ------------------------------
    Davin Ardian
    ------------------------------

    Original Message


  • 4.  RE: QNI virtual appliance installations

    Posted Wed November 17, 2021 01:01 AM
    Reply
    Hi Davin, if you are intending to pass through a physical NIC of the hypervisor host through to your VM, then I would definitely recommend using one of our supported software platform cards that you have listed.

    ------------------------------
    Dale Bowie
    QRadar Network Insights and Incident Forensics Product Owner
    IBM
    ------------------------------

    Original Message


  • 5.  RE: QNI virtual appliance installations

    Posted Wed November 17, 2021 08:50 PM
    Reply
    Dear Dale Bowie,

    well noted, thank you for the advice

    ------------------------------
    Davin Ardian
    ------------------------------

    Original Message


Related Content