Have a need for speed?
Check out the SOS SNNV!
SOS SNNV uses extremely fast Non-volatile Memory (NVMe) for data storage.
Official Hardware Appliances for Security Onion
We know Security Onion's hardware needs, and our appliances are the perfect match for the platform. Leave the hardware research, testing, and support to us, so you can focus on what's important for your organization.
Integration with Security Onion
Security Onion's SOC interface provides appliance-specific information directly in the user-interface. Use this information to monitor the appliance's health in realtime. Also view the appliance front and rear panels, useful for walking through connectivity discussions with personnel in the data center. Only official Security Onion Solutions appliances are supported with this integration.
Support Security Onion
Not only will you have confidence that your Security Onion deployment is running on the best-suited hardware, you will also be supporting future development and maintenance of the Security Onion project!
Response-Ready Appliances
Now offering our new Response-Ready appliances:
  • Government, Military, or Commercial Applications
  • Tactical Edge Enterprise Security Monitoring
  • Deployable, Small Form Factor, and ATA-Compliant
Appliance Comparison
 
Model
Forward
Throughput †
Max
Storage *
500
500 Mbps 8 TB
1000
1 Gbps 24 TB
1000F
1 Gbps 24 TB
4000
4 Gbps 120 TB
10000
10 Gbps ‡ 7 TB
MN
N/A 15 TB
SN7200
N/A 72 TB
SNNV
N/A 30 TB
GoFast
10 Gbps 120 TB
GoBig
10 Gbps ‡ 165 TB
* Disk storage sizes are approximate, and represent the largest configuration available for the appliance. When referring to drive capacity, one terabyte, or TB, equals one thousand billion bytes and one gigabyte, or GB, equals one billion bytes. The operating system may use a different standard of measurement and report a lower capacity. Some of the listed capacity is used for formatting and other functions and will not be available for data storage.
† Actual performance depends on network traffic. Stated specifications represent the fastest configuration available for the appliance, however, other configurations are also available for specific use cases. Forward node estimates assume a separate Manager Node is used.
‡ The SOS 10000 and GoBig Forward Throughput rating is achieved without full packet capture.
Ready to purchase or need more information?