Technical design
How CNA works and what it needs from your network, for the network, security and infrastructure engineers who will review it.
| Question | Short answer |
|---|---|
| What connects to what? | Sensors and agents connect outbound to a Cloud Unit dedicated to you, with data over TLS. No inbound firewall rules. |
| Is data shared between clients? | No. Each client has its own Cloud Unit, portal and databases. |
| What does it collect? | Metrics, not logs or traces. Kept for 90 days by default. |
| How fast does it alert? | About 10–15 minutes for a sustained problem, estimated from the default settings. |
| How is it configured? | In the portal. Devices follow within a poll cycle. |
In this section
Architecture
Four vantage points, outbound TLS, and a Cloud Unit dedicated to each client.
ArchitectureSensors and deployment packages
ModelB, ModelC and ModelA, the four packages, placement rules and worked floor plans.
SensorsData, retention and alerting
What is measured and how often, how long it is kept, what alerts and where alerts go.
Data and alertingNetwork requirements
Firewall, Wi-Fi authentication, wired ports, WAN probes and portal access.
Network requirementsFor the security controls and independent assurance, see Security. To try CNA on your own network, see the six-week pilot.