RSA NetWitness Concentrator and RSA NetWitness Broker
RSA NetWitness Concentrator and RSA NetWitness Broker are high-performance, Linux-based network appliances that extend the reach of RSA NetWitness across your enterprise and facilitate real-time and historical analysis, reporting, and alerting.
Concentrator and Broker aggregate and analyze comprehensive network and application-layer detail across multiple capture locations and make it available for analysis by RSA NetWitness Informer, RSA NetWitness Investigator, and RSA NetWitness Spectrum.
Concentrator aggregates data across clusters of RSA NetWitness Decoders in real time.
Concentrator is designed for hierarchical data aggregation for ultimate scalability and deployment flexibility across various organization-specific network topologies and infrastructures. As a result, Concentrators can be tiered in deployments to give visibility into multiple capture locations.
In environments where multiple Concentrators are deployed, Broker acts as a single query engine to generate a real-time, hierarchical view across your entire network. Broker provides a single point of access to data and is designed to operate and scale in any network environment, independent of network latency, throughput, or data volume.