-
What is the Blackhawk Analytic Platform?
The Blackhawk Analytic Platform (a.k.a., the Blackhawk) is an all-in-one detection & response appliance. It performs the functions of network monitoring, network packet capture, host e-discovery, host remediation, and event correlation.
-
What types of devices would the Blackhawk Analytical Platform replace on a network?
One Blackhawk replaces an intrusion detection/protection system, a network recorder, a host e-Discovery tool, host remediation software, a security information & event management system, and a firewall.
-
What BlackhawkNest products come on the Blackhawk Analytic Platform?
Blackhawk Capture, Blackhawk Talon, Blackhawk IDS/IPS, Blackhawk Firewall, and Splunk Enterprise are all included with the purchase of a Blackhawk Analytic Platform.
-
If I purchase the Blackhawk Analytic Platform and then realize I don’t require, or can’t use, all of the included products, is there a window where I can return part of the package and get a refund?
The Blackhawk is an all-in-one appliance. While some of the products are sold separately, the Blackhawk ships as an integrated suite of software. Individual softwares may not be returned for a partial refund.
-
Which ways can the Blackhawk be managed?
A Blackhawk can be managed as an on-premise, virtualized, or hosted service.
-
How customizable/scalable is the Blackhawk device?
The Blackhawk Analytic Platform can be used effectively on a wide range of network sizes. While the appliance comes in five standard sizes ranging 8TB - 1.6PB of raw storage, the platform can be purchased, and upgraded with, different storage capacities to suit your needs.
-
Am I limited to the number of data sources for a Blackhawk?
No. Please be aware all Blackhawks come with 1 Gigabyte per day of data enabled. Additional Gigabytes per day will be billed additionally and incrementally on a monthly basis.
-
Can one device be used to manage multiple networks/subnetworks?
Depending on where the device is placed on your architecture, it can be used to protect more than one network/subnetwork. The Blackhawk supports up to 40 Gb network cards and up to 1.6PB of raw storage with lossless network packet capture. The limit on the number of networks monitored is usually about how many networks can be spanned simultaneously with your network switch.
-
How do I know if it would be compatible with my network bandwidth?
The Blackhawk works on 10/100 Megabit, 1 Gigabit, and 40 Gigabit networks.
-
How do I integrate Blackhawk into my network?
You can use a monitoring/span port or a network tap.
-
If I realize I need a different network bandwidth after purchasing one, would I need to buy a new one?
No. You can order additional network cards from BlackhawkNest.
-
How many network cards can be installed in a Blackhawk?
Blackhawk can accommodate up to 4 network cards.
-
If I realize I need more storage after purchasing one, would I need to purchase a new one or would mine be upgradable?
Each 2U Blackhawk Analytical platform can be expanded to hold up to 512TBs, and each 4U can hold up to 1.6PBs. Expansion drive arrays can be purchased from BlackhawkNest in 4, 8, 16, and 32TB increments.