The SentryWire Series VM/10/100/200/300/400 Systems are complete systems that come with everything you need. If you want to expand your system at a later date, don't worry you can add throughput, capacity and federate to hundreds of clusters. SentryWire has almost limitless configuration and integration flexibility. You can sort the SentryWire Systems by lossless capture rates.
SentryWire is available in custom build VMs for virtualization use cases. Specific requirements can be reviewed/discussed. Each VM is a fully featured SentryWire instance, capable of 1 - 500Mbps. Federation Manager is available with SentryWire Virtual Machine.
One (1) 4.4" x 4.56" x 2.04" small form factor Capture/Storage Node capturing losslessly from 1 to 100 Megabits per second, with built-in storage capacity and a single RJ45 copper network connection. Assuming 40% bandwidth utilization, a 100Mbps network and 3x compression, this system may store 3.9TB's or 10 days of traffic. All systems can be federated and managed from a single GUI. Other storage options are available.
One (1) 1U Capture/Storage Node capturing losslessly at up to 100 Megabits per second, with built-in storage capacity and 2 network connections. Assuming 40% bandwidth utilization, a 100Mbps network and 3x compression, this system may store 54TB's or 125 days of traffic. All systems can be federated and managed from a single GUI. Other storage options are available.
The Sentry100 V5, has a capture rate of 500Mbps and starts with 364TB’s of raw storage, or 267TB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 1.5x will yield 401TB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry100 V5, is expandable to 8 Nodes (2.9PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry130 V5, has a capture rate of 1Gbps and starts with 364TB’s of raw storage, or 267TB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 1.5x will yield 401TB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry130 V5, is expandable to 8 Nodes (2.9PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry150 V7, has a capture rate of 2Gbps and starts with 416TB’s of raw storage, or 300TB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 2x will yield 600TB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry150 V7, is expandable to 6 Nodes (2.4PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry200 V5, has a capture rate of 4Gbps and starts with 364TB’s of raw storage, or 267TB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 1.5x will yield 401TB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry200 V5, is expandable to 8 Nodes (2.9PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry215 V5, has a capture rate of 10Gbps and starts with 364TB’s of raw storage, or 267TB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 1.5x will yield 401TB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry215 V5, is expandable to 8 Nodes (2.9PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry230 V7, has a capture rate of 10Gbps and starts with 468TB’s of raw storage, or 335TB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 1.5x will yield 503TB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry230 V7+, has a capture rate of 10Gbps and starts with 1,080TB’s of raw storage, or 820TB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 1.75x will yield 1,435TB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry230 V7, is expandable to 6 Nodes (2.8PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry230 V7+, is expandable to 8 Nodes (8.6PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry250 V5+, has a capture rate of 20Gbps and starts with 1.6PB’s of raw storage, or 1.3PB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 1.5x will yield 1.9PB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry250 V5+, is expandable to 16 Nodes (13.4PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry250 V7+, has a capture rate of 20Gbps and starts with 6.4PB’s of raw storage, or 5PB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 2x will yield 10PB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry250 V7+, is expandable to 16 Nodes (17.2PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry300 V5+, has a capture rate of 40Gbps and starts with 3.3PB’s of raw storage, or 2.6PB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 1.5x will yield 3.9PB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry300 V5+, is expandable to 32 Nodes (26.8PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry300 V7+, has a capture rate of 40Gbps and starts with 12.9PB’s of raw storage, or 10PB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 2x will yield 20.1PB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry300 V7+, is expandable to 28 Nodes (30.2PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry330 V5+, has a capture rate of 60Gbps and starts with 5PB’s of raw storage, or 3.9PB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 1.5x will yield 5.8PB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry330 V5+, is expandable to 48 Nodes (40.3PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry350 V5+, has a capture rate of 80Gbps and starts with 6.7PB’s of raw storage, or 5.2PB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 1.5x will yield 7.8PB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry350 V5+, is expandable to 64 Nodes (53.7PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry400 V5+, has a capture rate of 100Gbps and starts with 8.4PB’s of raw storage, or 6.5PB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 1.5x will yield 9.7PB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry400 V5+, is expandable to 80 Nodes (67.2PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry400 V7, has a capture rate of 100Gbps and starts with 2.3PB’s of raw storage, or 1.75PB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 1.75x will yield 3PB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry400 V7, is expandable to 48 Nodes (37.2PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
The Sentry420 V7, has a capture rate of 120Gbps and starts with 2.6PB’s of raw storage, or 2PB’s of available packet storage after RAID VI and Metadata overhead. Estimating compression at 1.75x will yield 3.5PB’s of effective packet storage capacity. Additional capacity can be achieved by adding Cluster Nodes.
The Sentry420 V7, is expandable to 48 Nodes (37.2PB’s raw storage capacity). All systems can be federated and managed from a single GUI.
SentryWire is the first full packet capture solution to offer Carrier-Grade throughput, performance and capacity with configurations that allow for +1Tbps of throughput and +100PB’s of data retention. Whatever your throughput & data retention requirements are, we have a solution for you.
Imagine buying an IT solution once and upgrading it as needed, without losing a penny on your investment. Start small, SentryWire can grow with your enterprise. As your network throughput increases, simply add another capture node. If you want to increase the amount of network traffic you retain simply add a cluster node. You get uninterrupted value from your investment without ever re-buying storage or compute that you already own. Simply add capacity and throughput.
The Sentry Cluster Node is a component of our Sentrywire platform’s unique capture and storage architecture. The system is managed by a Capture/Storage Node which offers high-speed packet recording with real-time analytics and visualization. Data is captured and stored within the SentryWire Capture/Storage Node, additional compute and storage can be attained by attaching one or more Cluster Nodes. There are two varieties of Cluster Nodes available 2U and 4U, each offering the same powerful packet processing features but with different storage capacities.
Sentry Series capacities and estimated timelines for the configurations specified above will vary with the network utilization rate, the amount of encrypted traffic and the compression rates achieved with your data. Sentry Series configurations subject to change.
The Sentry P1/P2/P3/P4 are portable, brief case size, high-speed packet capture systems that offer indicators of compromise event alerting, BPF filter event triggering and a fully integrated analytics workflow with a collection of open source packet analysis software tools. View IoC logging over a long PCAP forensic timeline and post-process PCAPs for packet analysis and visualization. The Sentry P1/P2/P3/P4 are ideal for network performance monitoring, cyber forensics, compliance enforcement, lawful intercept and packet data analytics.
Up to 1Gbps
Up to 3Gbps
Up to 10Gbps
High-performance, Modular Server for Cyber Analytics & Network Forensics.
TSA Compliant