There are two collector deployment options:
- Virtual
- Physical
Virtual and physical collectors are in essence the same and perform the same tasks.
Collectors passively listen to and identify everything on your network—they find the assets in your environment and integrate with your data sources to perform such actions as network analysis and risk assessment.
All Armis physical collectors are delivered to your site:
- Preconfigured with connectivity settings (IP, proxy, etc.).
- Immediately ready for simple installation.
Review the options below to choose and order the right collector, install it, or get support.
Collector Types
|
Collector |
Description and Notes |
|
Virtual Collector |
Can be downloaded from within the Armis console Support up to 3Gbps Supports OVA, QCW2, AMI, VHD, and VHDX |
|
Standard 10G Collector |
Armis 1U Supermicro standard collector (D-5019) 4 copper span interfaces and 2 fiber span interfaces * Supports up to 7Gbps span traffic (see Specs) |
|
Mini Collector |
Armis small factor supermicro collector (E-300) 1-2 copper span ports Supports up to 1Gbps span traffic (see Specs) Not rack-able by default. Can order rack tray for special cases |
|
Micro Collector |
Armis new LEX small factor rugged collector (LEX) 1-2 copper span ports Supports up to 200Mbps span traffic (see Specs) Not rack-able Available in Standard, Wifi or LTE |
|
Extended Capacity 40G Collector |
Armis 1U Supermicro collector with 40G capability Can support only 1 x 40G port Supports up to 25Gbps span traffic (see Specs) |
|
Special Order Collectors |
Dual Power 10G or 40G Collectors Dell Collector for Fed customers Standard 1G fiber Collector (same as standard but with fiber card) |
Accessories, Cables, and other Options
|
SFPs (10G) |
10G SR MM LC SFP 10G LR SM LC SFP Cisco compatible (may be additional cost for non-Cisco brand) |
|
QSFPs |
SR4 for 40G Other- requires different network card and notification (LR, BD, etc) |
|
SFPs (1G) |
1G fiber- requires special order for dedicated fiber card 1G copper-can be used on switch side only |
|
Electric cables |
Choose the right type when ordering |
|
Antennas |
Short and long antennas for wifi and LTE |
|
Rails |
DIN rail for micro collector Rack rail for mini collector |
Determining Collector Placement
Architecture Overview & Network Diagram
Armis is deployed with minimal components, and passively ingests various data sources across the management plane, such as Wireless LAN controllers (WLC) and network traffic monitoring (SPAN port).Armis also integrates to various infrastructure (firewalls, NAC, etc.) to automate device/risk control functions, and to Security Information and Event Management (SIEM) and other orchestration tools toautomate and complement existing response management practices and policies.
Collector—Armis Appliance is running on a container and therefore operates on:
- Physical Appliance—Small 1U hardware appliance.
- Virtual Appliance—ESXi v 5.5 or later. It can also run on other virtualization systems upon request.
- Each Appliance is autonomous and reports to the back-end engine directly. There is no hierarchy or connectivity relationship between multiple Appliances in an organization, so the scaling is linear.
Armis Analysis Engine and Device Knowledge Base—The AWS cloud-based, device identification, profiling/baselining, persistent behavioral anomaly detection, threat detection, and protection actions.
Network Topology Diagram
Using the Network Diagram in the Armis console, at a glance, you can see the topology of the network. Based on existing Ethernet and Wi-Fi connections, it shows the structure of the network (including network equipment and end-point devices) as well as the exact location of a single device within it.The Network Diagram displays the network structure and is useful for network segmentation, network troubleshooting, equipment configuration, and many other purposes. The visualization in the Network Diagram helps you to easily understand and explore your assets and security information.
For more information and visual examples, see Network Topology Diagram.
How to order a collector:
- Please contact your Customer Success Manager
Shipping:
The following countries are considered local shipments: USA, Canada, EU+, UK, China, Brazil, Israel.
- Armis uses exporter service in order to ship collectors to all countries, except those prohibited under US law.
- In most cases, the customer sees the shipment as local from country of destination.
- In some cases, the customer will be requested to provide company information, according to local law.
Collector Support
- Warranty:
- Armis will warrant the collector for as long as the customer is in good standing
- In case of failure, Armis will RMA
- End of Life Support
- Armis may declare End of Life (EoL) for its collectors with at least 9 months notice. Once a collector is at EoL, Armis may stop all support to this collector, including software updates and hardware support.
- Armis will RMA and provide new collector in case of leased collector
- End of Project
- Customer will return the collector to Armis
Collector Quickstart Setup Guide
