Selection & Interfaces

5.1 Core Product Lineup

The NTA/AD product ecosystem consists of three primary hardware platforms — the NTA-2000 Series Sensor, the NTA-5000 Series Analytics Platform, and the PCAP-Store 100T storage appliance — plus a software-only deployment option for virtualized and cloud environments. Each platform is optimized for a specific role in the overall architecture, and they are designed to work together as an integrated system. The photograph below shows the three hardware platforms in their standard rack-mount form factors.

Figure 5.1: NTA/AD core product lineup — NTA-2000 Series Sensor (1U, 10 Gbps), NTA-5000 Series Platform (2U, 100 Gbps), and PCAP-Store 100T storage appliance (4U, 100 TB).

5.1.1 Core Product Feature Comparison

The table below provides a comprehensive feature comparison across all four deployment options, covering hardware specifications, telemetry capabilities, detection features, and integration interfaces. This table is the primary reference for solution package selection.

Legend: ✓ = Supported  |  Optional = Available as add-on  |  — = Not applicable

5.2 Interface Logic and Integration Architecture

The interface logic diagram below provides a comprehensive view of all data ingestion interfaces, management interfaces, integration outputs, and storage interfaces supported by the NTA/AD Analytics Platform. This diagram serves as the definitive reference for integration planning, firewall rule configuration, and API development.

Figure 5.2: NTA/AD Analytics Platform interface logic diagram showing all data ingestion, management, integration output, and storage interfaces with protocol specifications and port numbers.

5.2.1 Data Ingestion Interface Specifications

The following table details the technical specifications for each data ingestion interface, including the protocol, transport, port, authentication method, and maximum ingestion rate. These specifications must be used when configuring network devices to export telemetry and when sizing network bandwidth for telemetry transport.

5.3 Selection Criteria and Sizing Guidelines

Selecting the appropriate product configuration requires evaluating four primary dimensions: peak monitoring throughput, required telemetry types, PCAP storage capacity, and analytics processing requirements. The sizing methodology starts with traffic measurement at each observation point, then applies a growth factor for future capacity, and finally maps the resulting requirements to the appropriate product platform.