Napatech Pandion Flex

Smarter Data – On Demand

Pandion Flex offers nanosecond timestamping and 100% data capture with zero packet loss. With every single data packet available, choose the relevant information needed for your business purposes. Save time and costs, and retrieve the right data, when and where you need it.

 

Scalability

Prepare for longer-term storage solutions with Pandion Flex. Reduce your total cost of ownership and scale as needed with your network as this rack-mounted solution can add up to 8 Pandion Flex Storage Units to the Pandion Flex Recorder Unit.

 

Download Napatech Pandion data sheet

FINANCIAL LATENCY MEASUREMENT
 
Our solutions deliver data to applications that make delays visible by capturing all transactions and measuring the exact time of each trading event up to the nanosecond. This enables financial institutions to guarantee optimal performance and transparency of their trading infrastructure.
 

 

FRAUD DETECTION AND COMPLIANCE MANAGEMENT
 
Our solutions deliver data to applications that ensure compliance with regulations, protect trading information, and reduce the risk of confidential information leaks.  This enables stock exchanges to provide a seamless, secure trading experience for their customers.
 
 

 

INFRASTRUCTURE MANAGEMENT AND SECURITY
 
Our solutions delivers data to applications that enable infrastructure network managers to optimize performance of power transmission, water distribution, transportation, healthcare, and other complex networks. In addition to giving these managers the insight it takes to sustain the reliable functioning of these vital networks, our solutions also create the visibility needed to protect them.
 

 

CYBER DEFENSE
 
Our solutions deliver data to applications that help governments see all data running through their networks. Recognizing malicious packages and suspicious patterns allows governments to take preemptive measures to stop criminals before or during an attack, safeguarding sensitive government information as well as the personal data of citizens. 
 

 

SECURITY DATA COLLECTION
 
In order to protect networks from the most advanced cyber threats, our solutions deliver data to security applications such as:
 
  • Intrusion Detection Systems / Intrusion Prevention Systems (IDS/IPS) 
  • Unified Threat Management (UTM)
  • Security Information and Event Management (SIEM)
  • Data Loss Prevention (DLP)
  • Advanced Persistent Threats (ATP)
 
Security data collection systems make it possible to discover and contain threats faster based on real-time data from critical network links.
 

 

NETWORK AND CONTENT SECURITY
 
Our solutions deliver data to network appliances such as Intrusion Prevention Systems (IPS) that can see every detail within the networks they are protecting. They can stop attacks, as well as protect against data leaks, while at the same time ensure there is a 100% accurate record of everything that happened.
 

 

FULL LINE-RATE PACKET RECORDING 

When you want to prove network performance, or investigate a network problem, for example a breach, it is of outmost importance to have every single bit on the wire – up as well as downstream – securely recorded, also when the wire is fully loaded. Napatech Pandion is designed to secure this with its advanced recording engine utilizing state of the art server and hard disk technology together with Napatech zero packet loss accelerators. Connect Pandion to your network and capture all packets, including those you are looking for in connection with analyzing network incidents.
 
HARDWARE TIME STAMP
 
When doing network analysis in connection with analyzing network problems, breaches, or network performance compliance, it is crucial to not only know what happened, but also when it happened. This information is needed to correlate events recorded or registered by more devices, in order to be able to establish the correct flow of events.  Pandion is based on Napatech accelerators, which are designed to timestamp each and every received packet with high precision. Pandion not only records all packets, it also attaches a timestamp to each and every received data packet on the wire with nanosecond precision before recording, thereby ensuring that it will always be possible to reconstruct the exact time order of events. Pandion can also be external time synchronized, ensuring that it will be possible to correlate events recorded by more physical devices – assuming they are synchronized to the same source.
 

 

FAST RETRIEVAL
 
Pandion records each and every single data packet together with a high precision timestamp. For investigations, it is also of extreme importance that specific sets of packets can be found in the multiple terabytes of recorded data (covering hours of traffic) and retrieved with high speed. Pandion is optimized for fast retrieval of different types of data packet search criteria at the same time as recording network data. So even when Pandion is retrieving data to be analyzed, it will still record network traffic without dropping a single packet. Search results are delivered in standard PCAP or PCAP NG file formats making it easy to integrate with other tools or systems.

ACCELERATED SEARCH

Pandion records data packets in time order, but to enable fast retrieval of specific data packets relating to certain traffic between two IP addresses, Pandion creates an advanced index based on selected common fields in each IP packet at full network speed. This is used to substantially accelerate searches for specific network traffic in the recorded multiple terabytes of data covering hours of traffic. Pandion not only gives the option to narrow down the amount of data to be used for a specific analysis by specifying a time window, but also the option to add a search criteria for certain IP addresses to reduce the time needed for the later analysis. Best of all, during all of this activity, Pandion is still recording.
BERKELEY PACKET FILTERS
 
Pandion can, while recording, retrieve specific data among the multiple terabytes of recorded data by setting up search criteria, such as a specific time window eventually combined with an accelerated search criteria (data packets relating to certain traffic between two IP addresses). This may, in some cases, not reduce the amount of data enough to be able to make an efficient analysis. Pandion therefore also supports the option of adding a search criteria specified by any BPF filter expression. Thus it is possible to make the search very focused, enabling investigations to be more efficient and less time consuming. In other words, you can easily find the data you need to analyze and only that. 

 

REST API
 
Pandion has, apart from the REST API, a web-based GUI, which can be accessed via any standard web-browser. The GUI gives the user the ability to not only configure and manage, but also the ability to specify search criteria and retrieve the data fulfilling the search criteria. The GUI can be used, not only during setup, configuration, trouble shooting, and maintenance, but also for starting and stopping network recording and setting up advanced searches. Search results are delivered in standard PCAP or PCAP NG file formats, enabling a huge variety of standard analyzing tools to be used alongside the web browser connected to Pandion.
 
Pandion has apart from a web-based GUI a REST API to be used to manage Pandion and for fast retrieval of specific data meeting advanced search criteria (time window, IP address, or BPF expression). The API is straightforward and the online help makes it fast and easy to integrate Pandion in a complete system requiring high-precision network traffic recording. Search results are delivered in standard PCAP or PCAP-NG format to facilitate seamless integration with other systems.
 

 

WEB-BASED GUI
 
Pandion has, apart from the REST API, a web-based GUI, which can be accessed via any standard web-browser. The GUI gives the user the ability to not only configure and manage, but also the ability to specify search criteria and retrieve the data fulfilling the search criteria. The GUI can be used, not only during setup, configuration, trouble shooting, and maintenance, but also for starting and stopping network recording and setting up advanced searches. Search results are delivered in standard PCAP or PCAP NG file formats, enabling a huge variety of standard analyzing tools to be used alongside the web browser connected to Pandion.

 

NAPATECH INTEGRATES PANDION WITH SPLUNK FOR 100 PERCENT NETWORK TRAFFIC DATA VISIBILITY

Integration Enables Complete Data Capture for Reduced Resolution Times and In-depth Forensic Analysis

Lack of visibility into data traffic hinders network security efforts, both before and after an event has occurred. To rectify this issue, Napatech announced today that the Pandion network recorder can now be fully integrated with Splunk, the leading platform for operational intelligence. This integration gives current Splunk users the possibility of having 100 percent visibility into network traffic data.
 

Splunk users now have access to a key component in their network infrastructure, the Napatech Pandion network recorder, for 100 percent data capture.
 
• Instant insight into alarms: The integration enables network security personnel to reduce the resolution times of events. The Splunk software triggers alarms, and when an unusual activity occurs in the network traffic, users can instantly get to the root of the problem.
 
• Smarter data retrieval: The Pandion recorder offers quick retrieval of the relevant data so that further forensic analysis and investigation can be done, with 100 percent data capture and zero packet loss to provide data that is also completely reliable.
 
• A scalable security solution: The scalability of Pandion offers a long-term solution that grows with users’ increasing security needs.

Read the full Splunk case study.

     

    FORM FACTOR
     
    Pandion Flex
    • 2U + 2U per storage unit 
    Pandion 20
    • 2U

     

    STORAGE CAPACITY
     
    Pandion Flex
    • 72TB - 648TB
    Pandion 20
    • 28TB

     

    CAPTURE-TO-DISK PERFORMANCE
     
    Pandion Flex
    • 10-40 Gbps
    Pandion 20
    • 20 Gbps

     

    CAPTURE CONNECTIVITY
     
    Pandion Flex
    • 4 x Dual-rate 1/10 Gb SFP/SFP+ 
    Pandion 20
    • 4 x Dual-rate 1/10 Gb SFP/SFP+

     

    MANAGEMENT INTERFACE
     
    Pandion Flex
    • 2 x 1Gbps + 2 x 10Gbps (BASE-T)
    Pandion 20
    • 2 x 1Gbps + 2 x 10Gbps (BASE-T)

     

    GUI 
     
    Pandion Flex
    • Web-based 
    Pandion 20
    • Web-based 
    리던던시 PSU
     
    Pandion Flex
    • Yes
    Pandion 20
    • Yes

     

    3 YEARS SUPPORT, WARRANTY AND UPDATES
     
    Pandion Flex
    • Yes
    Pandion 20
    • Yes