Appliance specifications

Overview, performance, and specifications for Vectra AI's physical, virtual, and cloud appliances.

Appliance and Sensor Specifications

The Vectra AI Platform provides coverage, clarity, and control across the entire modern network. Coverage for attackers’ moves across all of your network, identity, and cloud threat surfaces. AI signal clarity prioritizes attacks with AI assistants to automatically triage, correlate, and prioritize threats across domains. We put you in control with context to discover, hunt, investigate, and stop attacks early in their progression - all while spending less time prioritizing alerts.

Software updates, including new threat intelligence and detection algorithms, are included with your license. They are delivered to your system on a regular basis to ensure continuous protection from the latest threats. Match customers can also choose to enable automated curated ruleset updates that provide signature updates.

Appliances are supported in traditional physical on-prem, virtual hypervisor, and IaaS cloud environments. Vectra AI supports AWS, Azure, and GCP clouds along with VMware, Hyper-V, Nutanix, and KVM hypervisors. We continually evaluates customer demand for support of new environments. Please check with your account team for questions on future plans.

X-Series and S-Series appliances can perform “Sensor” duties, passively capturing network traffic out-of-band and forwarding a metadata stream to the “Brain” appliance for further processing. B-Series and X-Series appliances can serve as the Brain for your deployment. They run network detection models locally and serve as customer side integration point for added coverage, response, and context enhancement options. The Brain appliance is connected to the Vectra AI cloud where the Respond UX provides the UI along with advanced features such as Instant Investigation and AI-Assisted Search. In Quadrant UX deployments, the Brain appliance serves the classic UI locally. If you are unsure of your deployment type, please see Analyst UX options (RUX vs QUX).

Network traffic can be directed to appliances through physical SPAN/Copy/Mirror ports, TAPs, and packet brokers. Native cloud packet forwarding options are supported such as VPC Traffic Mirroring (AWS), VTAP (Azure), and NSI (GCP). Hypervisor based packet forwarding options are also supported. Sensors support a variety of encapsulation methods such as ERSPAN, GRE, VXLAN and GENEVE. For additional detail, please see the Vectra NDR (Detect) and Network Identity Architecture Overview.

Physical Appliance Specifications

Definitions

Performance

Refers to the amount of network traffic observed by Sensors that a Sensor can produce metadata for, or the amount of traffic observed by Sensors that a Brain can process metadata for including optional output to Stream.

Match performance is the expected performance when Match is enabled on a Sensor or mixed-mode appliance.

The performance numbers are based upon average throughput a given Sensor/Brain can process. Actual performance may vary depending on traffic composition. Please contact Vectra AI to discuss further.

Alternate Interface Configuration

When an appliance lists an alternate interface configuration as an option in any below table, that means that it supports configuration changes that allow the management interface and/or capture interfaces to be changed from their default assignment.

For the X29/M29 ,X47/M47, and S1v2 appliances, one of the 10 GbE SFP+ ports that are normally used for capture traffic can be configured to be used as a management interface. When configured as such, the original MGT1 copper port would be unused.

For the S1 appliance there are 4 different port option settings that vary what is available for use as the management interface and the capture interfaces.

Please see the quick start guides for these appliances for full details and how to configure the alternate interface configurations.

Paired Sensors

Refers to how many Sensors (physical, virtual, or cloud) an appliance can pair with.

Tracked Hosts

Refers to how many hosts the appliance running in Brain or Mixed mode can track simultaneously (open IP (host) sessions). Brains can typically retain and display data for larger numbers of hosts, this only refers to how many hosts the system can process metadata for simultaneously.

Supported SFPs and QSFPs

For any appliance that supports SFP interface (SFP+, SFP28, QSFP, QSFP28, etc), please see the supported SFPs and QSFPs article for additional details about specific SFPs supported per physical appliance..

Please see the quick start guides for your physical appliance to see port diagrams showing the interfaces available. Some appliances offer options to configure a capture port SFP for use as the management port. Your appliance may support several, only one, or no SFPs.

Please Note (SFPs available at no cost or for an added cost):

These purchasing guidelines apply to SFPs ordered as part of your appliance order:

• Up to 2 (if supported by your appliance model) SFP, SFP+, or SFP28 modules can be included at no additional cost in your Vectra appliance order.

  • This is valid for each appliance in your order.
• Additional SFP(s) of any type over the two specified above will incur additional cost.
• All 40/100G QSFPs will incur additional cost over the base price of the appliance.

X-Series Appliances

X-Series appliances can operate in Sensor, Brain, or Mixed mode deployments. For more details about appliance modes, please see Physical appliance modes and switching between them.

Interfaces and Capacity

Specification	X3	X29	X47
Management Interfaces (MGT)	2 x 1GbE Copper	2 x 1 GbE Copper	2 x 1 GbE Copper
Capture Interfaces	2 x 1 GbE Copper 2 x 10 GbE SFP+	2 x 1 GbE Copper 2 x 10 GbE SFP+	2 x 1 GbE Copper 2 x 10/25 GbE SFP28
Alternate Interface Configuration	N/A	Yes	Yes
Paired Sensors	150	150	150
Tracked Hosts	100,000	150,000	150,000

Performance

Specification	X3	X29	X47
Sensor Mode Performance	9 Gbps	15 Gbps	20 Gbps
Mixed Mode Performance	8 Gbps	8 Gbps	15 Gbps
Brain Mode Performance	14 Gbps	20 Gbps	30 Gbps
Match Performance — Sensor	3 Gbps	9 Gbps	13 Gbps
Match Performance — Mixed	1 Gbps	4.6 Gbps	6 Gbps

Power and Electrical

Specification	X3	X29	X47
Input Voltage	Dual power supplies, auto sensing 100-240 VAC, 50-60 Hz	Dual power supplies, auto sensing 100-240 VAC, 50-60 Hz	Dual power supplies, auto sensing 100-240 VAC, 50-60 Hz
Power — Normal	277 W (945 BTU/h)	296 W (1010 BTU/h)	602 W (2204 BTU/h)
Power — Max	392 W (1338 BTU/h)	337 W (1150 BTU/h)	866 W (2966 BTU/h)
Current — 110 VAC	3.5 A at 110 VAC	2.9 A at 110 VAC	8.0 A at 110 VAC
Current — 220 VAC	1.7 A at 220 VAC	1.5 A at 220 VAC	3.9 A at 220 VAC

Physical, Environment, and Reliability

Specification	X3	X29	X47
Dimensions	42.8 mm (1.685 inches) H 482 mm (18.976 inches) W 662.19 mm (26.070 inches) D	42.8 mm (1.685 inches) H 482 mm (18.976 inches) W 787.04 mm (30.99 inches) D	42.8 mm (1.685 inches) H 482 mm (18.976 inches) W 787.04 mm (30.99 inches) D
Weight	16.6 kg (36.6 lb)	17.5 kg (38.6 lb)	20.3 kb (44.8 lb)
Operating temperature	10° to 35° C (50° to 95° F)	10° to 35° C (50° to 95° F)	10° to 35° C (50° to 95° F)
Non-operating temperature	-40° to 65° C (-40° to 149° F)	-40° to 65° C (-40° to 149° F)	-40° to 65° C (-40° to 149° F)
Airflow	Front to back, 12.3 l/s (26 CFM)	Front to back, 16.9 l/s (35.8 CFM)	Front to back, 52.8 l/s (111.8 CFM)
Sound Power	3.8 bels	7.2 bels	8.4 bels
MTBCF	45,700 hours	87,600 hours	97,300 hours

M-Series Appliances

M-Series appliances share chassis with corresponding X-Series models, but are not equivalent in role. M-Series appliances are used for Stream deployments.

Interfaces and Performance

Specification	M29	M47
Management Interfaces (MGT)	2 x 1 GbE Copper	2 x 1 GbE Copper
Capture Interfaces	2 x 1 GbE Copper 2 x 10 GbE SFP+	2 x 1 GbE Copper 2 x 10/25 GbE SFP28
Alternate Interface Configuration	Yes	Yes
Stream Performance	75 Gbps	75 Gbps

Power and Electrical

Specification	M29	M47
Input Voltage	Dual power supplies, auto sensing 100-240 VAC, 50-60 Hz	Dual power supplies, auto sensing 100-240 VAC, 50-60 Hz
Power — Normal	296 W (10010 BTU/h)	602 W (2204 BTU/h)
Power — Max	337 W (1150 BTU/h)	866 W (2966 BTU/h)
Current — 110 VAC	2.9 A at 110 VAC	8.0 A at 110 VAC
Current — 220 VAC	1.5 A at 220 VAC	3.9 A at 220 VAC

Physical, Environment, and Reliability

Specification	M29	M47
Dimensions	42.8 mm (1.685 inches) H 482 mm (18.976 inches) W 787.04 mm (30.99 inches) D	42.8 mm (1.685 inches) H 482 mm (18.976 inches) W 787.04 mm (30.99 inches) D
Weight	17.5 kg (38.6 lb)	20.3 kb (44.8 lb)
Operating temperature	10° to 35° C (50° to 95° F)	10° to 35° C (50° to 95° F)
Non-operating temperature	-40° to 65° C (-40° to 149° F)	-40° to 65° C (-40° to 149° F)
Airflow	Front to back, 16.9 l/s (35.8 CFM)	Front to back, 52.8 l/s (111.8 CFM)
Sound Power	7.2 bels	8.4 bels
MTBCF	87,600 hours	97,300 hours

S-Series Appliances

S-Series appliances operate in Sensor mode only. For more details about appliance modes, please see Physical appliance modes and switching between them.

Interfaces and Capacity

Specification	S1	S1v2	S11	S17	S101	S127
Management Interfaces (MGT)	2 x 1 GbE Copper	2 x 1 GbE Copper	2 x 1 GbE Copper	1 x 10 GbE Copper 1x 1 GbE Copper	2 x 10 GbE SFP+	2 x 10/25 GbE SFP28
Capture Interfaces	4 x 1 GbE Copper 2 x 10 GbE SFP+	2 x 1 GBE Copper 2 x 10 GbE SFP+	2 x 1 GbE Copper	1 x 10 GbE Copper	2x 10 GbE SFP+ 2 configurable to: 10/25 GbE SFP28, 40 GbE QSFP, 100 GbE QSFP28	2 configurable to: 10/25 GbE SFP28, 40 GbE QSFP, 100 GbE QSFP28
Alternate Interface Configuration	Yes	Yes	N/A	N/A	N/A	N/A

Performance

Specification	S1	S1v2	S11	S17	S101	S127
Sensor Mode Performance	1 Gbps	1 Gbps	2 Gbps	9 Gbps	50 Gbps	58 Gbps
Match Enabled Performance	600 Mbps	400 Mbps	1.2 Gbps	2.5 Gbps	33 Gbps	30 Gbps

Power and Electrical

Specification	S1	S1v2	S11	S17	S101	S127
Input Voltage	Single external power supply, auto-sensing 100-240VAC, 50-60 Hz	Single external power supply, auto-sensing 100-240VAC, 50-60 Hz	Single power supply, auto-sensing 100-240VAC, 50-60 Hz	Single power supply, auto-sensing 100-240VAC, 50-60 Hz	Dual power supplies, auto sensing 100-240 VAC, 50-60 Hz	Dual power supplies, auto sensing 100-240 VAC, 50-60 Hz
Power — Normal	Not available	Not available	152 W (519 BTU/h)	Not available	615 W (2098 BTU/h)	769 W (2624 BTU/h)
Power — Max	45W (154 BTU/h)	150W (512 BTU/h)	186 W (635 BTU/h)	196 W (669 BTU/h)	868 W (2962 BTU/h)	1073 W (3661 BTU/h)
Current — 110 VAC	2.0 A at 100 VAC	2.0 A at 110 VAC	1.7 A at 110 VAC	1.8 A at 110 VAC	7.9 A at 110 VAC	9.8 amps at 110 VAC
Current — 220 VAC	1.0 A at 240 VAC	1.0 A at 220 VAC	0.8 A at 220 VAC	0.9 A at 220 VAC	3.8 A at 220 VAC	4.8 amps at 220 VAC

Physical, Environment, and Reliability

Specification	S1	S1v2	S11	S17	S101	S127
Dimensions	52 mm (2.04 in) H 208 mm (8.18 in) W 200 mm (7.87 in) D	43.7 mm (1.7 in) H 339.6 mm (13.3 in) W 241.1 mm (9.5 in) D	42.8 mm (1.685 inches) H 434 mm (17.1 inches) W 535 mm (22.6 inches) D	42.8 mm (1.685 in) H 434 mm (17.1 in) W 461 mm (18.2 in) D	42.8 mm (1.685 inches) H 482 mm (18.976 inches) W 808.5 mm (31.8 inches) D	42.8 mm (1.685 inches) H 482 mm (18.976 inches) W 787.04 mm (30.99 inches) D
Weight	Without power supply unit (PSU): 1.4 kg (3.1 lb) Including power supply and packaging: 4.9 kg (10.8 lb)	4.5 kb (9.9 lb)	12.2 kg (26.9 lb)	9.6 kg (21.2 lb)	21 kg (46.3 lb)	20.3 kg (44.8 lb)
Operating temperature	0° to 40° C (32° to 104° F)	0° to 40° C (32° to 104° F)	0° to 40° C (32° to 104° F)	5° to 40° C (41° to 104° F)	10° to 35° C (50° to 95° F)	10° to 35° C (50° to 95° F)
Non-operating temperature	-40° to 70° C (-40° to 158° F)	-40° to 70° C (-40° to 158° F)	-40° to 70° C (-40° to 158° F)	-40° to 65° C (-40° to 149° F)	-40° to 65° C (-40° to 149° F)	-40° to 65° C (-40° to 149° F)
Airflow	In bottom, out sides and back, 4.7 l/s (10 CFM)	In front/sides, out back, CFM not available	Front to back, 5.4 l/s (11.4 CFM)	Front to back, 11.0 l/s (23.4 CFM)	Front to back, 29.1 l/s (61.6 CFM)	Front to back, 52.8 l/s (111.8 CFM)
Sound Power	4.8 bels	Not available	5.7 bels	7.6 bels	7.6 bels	8.4 bels
MTBCF	445,000 hours	117,700 (MTBF)	109,000 hours	TBD	107,000 hours	102,000 hours

B-Series Appliances

B-Series appliances serve as Brain appliances only. For more details about appliance modes, please see Physical appliance modes and switching between them.

Interfaces and Capacity

Specification	B101	B127
Management Interfaces (MGT)	2 x 10 GbE SFP+	2 x 10/25 GbE SFP28
Capture Interfaces	N/A	N/A
Alternate Interface Configuration	N/A	N/A
Paired Sensors	500	500
Tracked Hosts	300,000	300,000

Performance

Specification	B101	B127
Brain Mode Performance	75 Gbps	75 Gbps

Power and Electrical

Specification	B101	B127
Input Voltage	Dual power supplies, auto sensing 100-240 VAC, 50-60 Hz	Dual power supplies, auto sensing 100-240 VAC, 50-60 Hz
Power — Normal	604 W (2061 BTU/h)	773 W (2638 BTU/h)
Power — Max	846 W (2887 BTU/h)	1149 W (3920 BTU/h)
Current — 110 VAC	7.7 amps at 110 VAC	10.7 amps at 110 VAC
Current — 220 VAC	3.7 amps at 220 VAC	5.3 amps at 220 VAC

Physical, Environment, and Reliability

Specification	B101	B127
Dimensions	42.8 mm (1.685 inches) H 482 mm (18.976 inches) W 808.5 mm (31.8 inches) D	42.8 mm (1.685 inches) H 482 mm (18.976 inches) W 787.04 mm (30.99 inches) D
Weight	21 kg (46.3 lb)	20.3 kg (44.8 lb)
Operating temperature	10° to 35° C (50° to 95° F)	10° to 35° C (50° to 95° F)
Non-operating temperature	-40° to 65° C (-40° to 149° F)	-40° to 65° C (-40° to 149° F)
Airflow	Front to back, 61.6 CFM = 29.1 l/s	Front to back, 111.8 CFM = 52.8 l/s
Sound Power	7.6 bels	8.4 bels
MTBCF	109,000 hours	132,000 hours

Customer Premise Virtual (Hypervisor) Deployment

These virtual appliances are deployed in traditional hypervisor enviroments such as VMware vSphere, Hyper-V, KVM, and Nutanix.

Virtual Brains

Hypervisor	VM Type / Version	Cores	Memory	Storage (OS, Data) in GB	Paired Sensors	Tracked Hosts	Performance
VMware	vSphere 6.5 or later	4	48GB	128,512	5	25,000	150 Mbps
VMware	vSphere 6.5 or later	6	48GB	128,512	10	37,500	500 Mbps
VMware	vSphere 6.5 or later	8	64GB	128,512	15	50,000	2 Gbps
VMware	vSphere 6.5 or later	16	128GB	128,512	25	50,000	4 Gbps
VMware	vSphere 6.5 or later	32	256GB	128,512	100	150,000	10 Gbps
Nutanix	AOS 6.8.1 and higher with Prism Central (and v3 API) available	32	256GB	128,512	100	150,000	10 Gbps

Virtual Sensors

Hypervisor	VM Type / Version	Cores	Memory	Storage	Performance
VMware	vSphere 6.5 or later	2	8 GB	100 GB	500 Mbps
VMware	vSphere 6.5 or later	4	8 GB	150 GB	1 Gbps
VMware	vSphere 6.5 or later	8	16 GB	150 GB	2 Gbps
VMware	vSphere 6.5 or later	16	64 GB	600 GB	5 Gbps
VMware	vSphere 6.5 or later	32	114 GB	830 GB	20 Gbps
Hyper-V	Windows Server 2016 w/ HW v8 or higher	2	8 GB	100 GB	500 Mbps
Hyper-V	Windows Server 2016 w/ HW v8 or higher	4	8 GB	150 GB	1 Gbps
Hyper-V	Windows Server 2016 w/ HW v8 or higher	8	16 GB	150 GB	2 Gbps
Hyper-V	Windows Server 2016 w/ HW v8 or higher	16	64 GB	500 GB	5 Gbp
KVM	Standard PC (Q35 + ICH9, 2009)	2	8 GB	100 GB	500 Mbps
KVM	Standard PC (Q35 + ICH9, 2009)	4	8 GB	150 GB	1 Gbps
KVM	Standard PC (Q35 + ICH9, 2009)	8	16 GB	150 GB	2 Gbps
KVM	Standard PC (Q35 + ICH9, 2009)	16	64 GB	500 GB	5 Gbps
Nutanix	AOS Version: 5.20.3.5 or later; AHV Version 2021105.2267 or later	2	8 GB	100 GB	500 Mbps
Nutanix	AOS Version: 5.20.3.5 or later; AHV Version 2021105.2267 or later	4	8 GB	150 GB	1 Gbps
Nutanix	AOS Version: 5.20.3.5 or later; AHV Version 2021105.2267 or later	8	16 GB	150 GB	2 Gbps
Nutanix	AOS Version: 5.20.3.5 or later; AHV Version 2021105.2267 or later	16	64 GB	500 GB	5 Gbps

Cloud - IaaS Deployment

These virtual appliances are deployed in IaaS clouds such as AWS, Azure, and GCP.

Please Note:

Vectra product and engineering teams monitor the changing landscape of available IaaS cloud instance types. Occassionally customers will ask if a specific new instance type is supported.

There are a number of factors that can cause Vectra AI to stay with a specific instance type versus a newer one such as:

• Cost increase vs performance increase - sometimes a newer instance, for example, might cost 17% more but only increase performance by 10%.
• Availability - not all new instance types are always available in all the locations that Vectra AI supports.

Please reach out to your account team if you have questions about specific instance types that aren't supported.

Virtual Brains (IaaS)

Cloud	VM Type	Cores	Memory	Storage in GB (OS, Data, Data, Data)	Paired Sensors	Tracked Hosts	Performance
AWS	r5d.2xlarge	8	64 GB	256, 64, 128, 256	15	50,000	2 Gbps
AWS	r5d.4xlarge	16	128 GB	256, 64, 128, 256	25	50,000	5 Gbps
AWS	r5d.8xlarge	32	256 GB	256, 64, 128, 256	100	150,000	15 Gbps
AWS	r5.16xlarge	64	512 GB	256, 64, 512, 512	500	500,000	50 Gbps
Azure	Standard_E16s_v3	16	128 GB	256, 64, 128, 256	25	50,000	5 Gbps
Azure	Standard_E32s_v3	32	256 GB	256, 64, 128, 256	100	150,000	15 Gbps
GCP	n2-highmem-16	16	128 GB	1 TB (single partition)	25	50,000	5 Gbps
GCP	n2-highmem-32	32	256 GB	1 TB (single partition)	100	150,000	15 Gbps
GCP	n2-highmem-64	64	512 GB	1.2 TB (single partition)	100	150,000	50 Gbps
GCP	n2-highmem-96	96	768 GB	4 TB (single partition)	100	500,000	85 Gbps

Virtual Sensors (IaaS)

Cloud	VM Type	Cores	Memory	Storage (OS, Data) in GB)	Performance
AWS	r5(n).large	2	16 GB	50, 128	1 Gbps
AWS	r5(n).large	4	32 GB	50, 128	2 Gbps
AWS	r5(n).2xlarge	8	64 GB	50, 512	4 Gbps
AWS	r5(n).4xlarge	16	128 GB	50, 512	8 Gbps
AWS	c5n.18xlarge	72	192 GB	50, 128 (No PCAP capability)	Up to 10 Gbps
Azure	Standard_DS11_v2	2	14 GB	50, 128	1 Gbps
Azure	Standard_DS3_v2	4	14 GB	50, 128	2 Gbps
GCP	e2-standard-2	2	8 GB	50, 128	1 Gbps
GCP	e2-standard-4	4	16 GB	50, 128	2 Gbps
GCP	e2-standard-16	16	64 GB	50, 128	5 Gbps
GCP	e2-standard-32	32	128 GB	50, 128	10 Gbps

Please note regarding AWS instances:

AWS vSensor configurations include both “n” and non “n” r5 instance types.

• Networking performance is quoted as “up to 10Gbps” on the r5 instances by AWS and can be influenced by neighboring instances allocated to the same physical hardware in AWS.
• Networking performance is quoted as “up to 25Gbps” on the r5n instances by AWS. These instances are still shared with neighbors but are optimized by AWS to have higher overall network throughput.
• Customers can work with AWS to utilize dedicated instances and distribute instances to provide the required networking throughput to their vSensor instances on that dedicated hardware.

The c5n.18x large vSensor instance type does not have a rolling capture buffer and can therefore not support PCAP generation for Detections that originate from traffic that is processed by those instances.

Due to variability in customer cloud network configurations and how mirroring may configured, it is not possible to guarantee performance on any instance with more than 2 cores (numbers are approximate and based on even distribution of packets across threads). Please contact Vectra to discuss further.

Vectra monitors instance types available from the supported IaaS vendors for cost, performance, and availability. If you have questions about specific instance types that are not supported, please contact your Vectra account team.

Vectra Match Performance

Appliance	Mode	Match Performanc(Detect and Match)
S1	Sensor	400 Mbps
S11	Sensor	1.2 Gbps
S101	Sensor	33 Gbps
S127	Sensor	30 Gbps
X3	Sensor	3 Gbps
X3	Mixed	1 Gbps
X29	Sensor	9 Gbps
X29	Mixed	4.6 Gbps
X47	Sensor	13 Gbps
X47	Mixed	6 Gbps
2 core vSensors (VMware, Hyper-V, KVM, Nutanix)	Sensor	250 Mbps
4 core vSensors (VMware, Hyper-V, KVM, Nutanix)	Sensor	500 Mbps
8 core vSensors (VMware, Hyper-V, KVM, Nutanix)	Sensor	1 Gbps
16 core vSensors (VMware, Hyper-V, KVM, Nutanix)	Sensor	2.5 Gbps
32 core vSensor (VMware)	Sensor	10 Gbps
2 core vSensors (AWS, Azure, GCP)	Sensor	500 Mbps
4 core vSensors (AWS, Azure, GCP)	Sensor	1 Gbps
8 core vSensors (AWS)	Sensor	2 Gbps
16 core vSensors (AWS)	Sensor	4 Gbps
16 core vSensor (GCP)	Sensor	2.5 Gbps
32 core vSensor (GCP)	Sensor	5 Gbps

Stream Sizing and Performance

When considering sizing for Stream it is important to understand that the traffic mix at customer sites varies widely. Some customers have traffic mixes that skew towards larger flows (think file transfers), and some will skew towards smaller flows. Performance will be lower when the traffic mix skews towards smaller flows as there will be more metadata to process. The below are guidelines for average traffic mixes and should not be considered absolute. Throughput refers to the amount of traffic observed by Sensors that forward metadata to the Vectra platform.

Virtual Appliances:

Hypervisor / Cloud	VM Type	Cores	Memory	Storage	~ Performance
VMware	vSphere 6.5 or later	2	8 GB	100 GB	Up to 2.5 Gbps
VMware	vSphere 6.5 or later	4	8 GB	150 GB	2.5 to 5 Gbps
VMware	vSphere 6.5 or later	8	16 GB	150 GB	5 to 10 Gbps
VMware	vSphere 6.5 or later	16	64 GB	150 GB	10 to 20 Gbps
Hyper-V	Windows Server 2016 w/ HW v8 or higher	2	8 GB	100 GB	Up to 2.5 Gbps
Hyper-V	Windows Server 2016 w/ HW v8 or higher	4	8 GB	150 GB	2.5 to 5 Gbps
Hyper-V	Windows Server 2016 w/ HW v8 or higher	8	16 GB	150 GB	5 to 10 Gbps
Hyper-V	Windows Server 2016 w/ HW v8 or higher	16	64 GB	500 GB	10 to 20 Gbps
KVM	Standard PC (Q35 + ICH9, 2009)	2	8 GB	100 GB	Up to 2.5 Gbps
KVM	Standard PC (Q35 + ICH9, 2009)	4	8 GB	150 GB	2.5 to 5 Gbps
KVM	Standard PC (Q35 + ICH9, 2009)	8	16GB	150 GB	5 to 10 Gbps
KVM	Standard PC (Q35 + ICH9, 2009)	16	64 GB	500 GB	10 to 20 Gbps
AWS	c5.xlarge	4	8 GB	50 GB	Up to 5 Gbps
AWS	c5.2xlarge	8	16 GB	50 GB	5 to 10 Gbps
AWS	c5.4xlarge	16	32 GB	50 GB	10 to 20 Gbps
Azure	Standard_DS4_v2	8	28 GB	50 GB	Up to 10 Gbps
Azure	Standard_DS5_v2	16	56 GB	50 GB	10 to 20 Gbps
GCP	e2-standard-4	4	16 GB	50 GB	Up to 5 Gbps
GCP	e2-standard-8	8	32 GB	50 GB	5 to 10 Gbps
GCP	e2-standard-16	16	64 GB	50 GB	10 to 20 Gbps

Vectra M Series Physical Appliances:

The M series physical appliances can support up to ~75 Gbps of throughput.

Please Note:

• Contact your account team or Vectra support for guidance on special situations, abnormal traffic mixes, or throughput needs outside of what is documented above.
• Vectra recommends that Stream VMs are configured to use storage local to the hypervisor and are not stored on a SAN. Stream VMs require extremely high throughput from their disk storage and this throughput cannot normally be sustained by SAN systems without impact to other SAN users.
• Please see VMware deployment details and considerations for guidance on supported CPUs, storage/SANs, networking requirements, vMotion, Enhanced vMotion compatibility, and unsupported hypervisors. While Sensor and VMware specific, this article applies to Stream VMs as well. The general guidance in the article also applies to Hyper-V and KVM deployments.