{"id":2149,"date":"2018-03-31T20:31:27","date_gmt":"2018-03-31T12:31:27","guid":{"rendered":"http:\/\/akl-it.com\/home\/?page_id=2149"},"modified":"2023-09-06T16:22:52","modified_gmt":"2023-09-06T08:22:52","slug":"falcon-neo","status":"publish","type":"page","link":"https:\/\/akl-it.com\/home\/products\/duplication-system\/forensic-duplicator\/falcon-neo\/","title":{"rendered":"Falcon Neo2"},"content":{"rendered":"\n<figure class=\"wp-block-image\"><img loading=\"lazy\" width=\"220\" height=\"220\" src=\"https:\/\/akl-it.com\/home\/wp-content\/uploads\/2018\/06\/FALNEO1.jpg\" alt=\"\" class=\"wp-image-2311\" srcset=\"https:\/\/akl-it.com\/home\/wp-content\/uploads\/2018\/06\/FALNEO1.jpg 220w, https:\/\/akl-it.com\/home\/wp-content\/uploads\/2018\/06\/FALNEO1-150x150.jpg 150w\" sizes=\"(max-width: 220px) 100vw, 220px\" \/><\/figure>\n\n\n\n<h3 class=\"product_title entry-title\"><span style=\"color: #000000;\"><strong>The Falcon-NEO2 is the groundbreaking follow-on to the Falcon\u00ae-NEO which has long been recognized as the \u201cBest In Class\u201d among all imagers. Retooled and optimized with a powerful new engine, the Falcon-NEO2 is the first field imager surpassing 100GB\/min E01 capture speeds. Its SAS-3 architecture (12 Gbps SAS) supports up to 5 simultaneous tasks with up to 10 source and 11 destination ports. Image SAS-3 SSDs at speeds up to 115GB\/min, and PCIe drives at speeds exceeding 100GB\/min. The USB ports on the Falcon-NEO2 are USB 3.2 Gen-2 (10Gbps), and two 10GbE ports continue to be available on Falcon-NEO2 for imaging to\/from network repositories. The \u201cCloud Storage Acquisition\u201d is standard and available out of the box on the Falcon-NEO2. Support for AFF4 capture is forthcoming and will soon be added to the Falcon-NEO2. In short, the Forensic Falcon-NEO2 is designed to take the already peerless standards to a higher level by offering features, capabilities, and speeds not available on any forensic field imager before.<\/strong><\/span><\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>    Image E01 from SAS-3 SSD to SAS-3 SSD at up to 115GB\/min\n    Clone PCIe to PCIe at speeds exceeding 100GB\/min\n    Wipe PCIe drives at speeds up to 115GB\/min\n    Supports up to 10 source and 11 destination ports\n    Support for AFF4 Capture (Forthcoming)\n    Multi-task. Image from up to 5 sources simultaneously; Support for 4 SAS\/SATA source drives are included with a 4-in-1 SAS\/SATA cable\n    All USB-A ports are 10Gbps\n    12Gbps SAS-3 support\n    Image to\/from Thunderbolt&#x2122; 3\/USB-C external storage enclosures with an optional I\/O card\n    Standard Cloud Storage Acquisition software provides convenient capture of OneDrive, Google Drive, and Dropbox files\n    Create a logical image targeting specific user\/data files\n    Concurrent Image+Verify greatly reduces duration of image plus verification process\n    Two 10GbE connections provide fast network imaging performance\n    Network capture feature to capture network traffic, VOIP, internet activity\n    Capture from mobile devices including Apple\u00ae iPhones, iPads, Android phones and tablets with optional renewable software package<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity\"\/>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong><a style=\"text-decoration: underline;\" href=\"https:\/\/akl-it.com\/home\/products\/duplication-system\/forensic-duplicator\/scsi-module-for-falcon\/; text-decoration: underline;\">SCSI Module Option for older model Falcon Neo (Click here for more information)<\/a><\/strong><\/p>\n\n\n\n<p><strong>Thunderbolt\/USB-C I\/O card<\/strong><br>An optional I\/O card supports imaging directly to\/from Thunderbolt 3\/USB-C and USB 3.1 Gen 2 external drives and storage enclosures. The card connects to either of the 2 write-protected source I\/O ports or 1 destination I\/O port.<br><\/p>\n\n\n\n<p><strong>FireWire Module<\/strong><br>The FireWire Module option provides support for FireWire enclosures. The FireWire Module connects to either of the PCIe ports and can provide 1 write-protected FireWire source or destination port.<br><\/p>\n\n\n\n<p><strong>SCSI Module (Forthcoming)<\/strong><br>The SCSI Module option provides support for 68-pin SCSI drives. The SCSI Module connects to either of the PCIe ports and can provide 1 write-protected SCSI source or 1 destination port. Optional adapters are available for 50-pin and 80-pin SCSI drives.<\/p>\n\n\n\n<p><strong>Fibre Channel Module<\/strong><br>The Fibre Channel Module option provides support for 40-pin Fibre Channel drives. The Fibre Channel Module connects to either of the PCIe ports and provides support for imaging to or from one 40-pin Fibre Channel drive.<br>An additional kit is available to allow cloning to and from two 40-pin Fibre Channel drives.<br><\/p>\n\n\n\n<p><strong>Mobile Device Capture Option<\/strong><br>This optional renewable software subscription<br>expands the functionality of the Forensic Falcon-NEO2 with a convenient method to quickly acquire potential evidence data from mobile devices including Apple iPhones, iPads, Android phones and tablets. For field investigations, adding this software option to the Falcon-NEO2 reduces the need to bring additional hardware to the scene to collect critical evidence from mobile device.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"> <strong>Extremely Fast Imaging<\/strong><br><\/p>\n\n\n\n<p>The Falcon-NEO2 achieves imaging from SAS-3 SSDs to SAS-3 SSDs at speeds up to 115GB\/min. Clone PCIe to PCIe at speeds exceeding 100GB\/min.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Multiple Image Formats<\/strong><br>The Falcon images and verifies to the following formats: native or mirror copy, dd image,.dmg image, e01, ex01.The Falcon-NEO supports MD5, SHA1, SHA256 and dual-hash (MD5+SHA-1) authentication.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Concurrent Image+Verify<\/strong><br>Imaging and verifying concurrently takes advantage of destination hard drives that may be faster than the source hard drive. Duration of total image+verify process time may be reduced by up to half. <\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Multiple Imaging Ports<\/strong> <br>Source Ports<\/p>\n\n\n\n<ul><li>4 SAS\/SATA drives supported with 1 port<\/li><li>2 USB 3.2 (Gen 2, can be converted to SATA using an optional USB to SATA adapter)<\/li><li>1 PCIe<\/li><li>2 I\/O ports for use with optional I\/O cards including Thunderbolt&#x2122;3\/USB-C<\/li><\/ul>\n\n\n\n<p><\/p>\n\n\n\n<ul><li>Destination ports include:<\/li><\/ul>\n\n\n\n<ul><li>4 SAS\/SATA drives supported with 1 port<\/li><li>4 USB 3.2 (Gen 2, can be converted to SATA using an optional USB to SATA adapter)<\/li><li>1 PCIe<\/li><li>1 I\/O port for use with optional I\/O cards including Thunderbolt&#x2122;3\/USB-C<\/li><\/ul>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Thunderbolt&#x2122;3\/USB-C support<\/strong><br>An optional I\/O card supports imaging directly to\/from Thunderbolt 3\/USB-C and USB 3.1 Gen 2 external drives and storage enclosures. The card connects to the Falcon-NEO\u2019s 2 write-blocked source I\/O ports or 1 destination I\/O port. Organizations using large capacity Thunderbolt storage enclosures for evidence data collection can now take advantage of Thunderbolt 3 technology\u2019s blazing fast transfer speeds to shorten the acquisition process time. The I\/O card does not currently support imaging in TDM from Mac\u00ae systems, please refer to the Falcon-NEO users\u2019 manual on how to image from Mac systems in TDM using the USB ports or our iSCSI boot device <\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Two 10GbE Network Ports<\/strong><br>provide fast network imaging. Image to\/from a network repository using CIFs protocol or iSCSI. Users can connect to a 10GbE NAS as a source and connect to your network using the 2nd 10GbE port to minimize bottlenecks. Provides a secure method to isolate the source network\/NAS from the destination NAS\/network. <\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>File Systems<\/strong><br>Falcon-NEO formats destination drives to NTFS, exFAT, EXT4, or FAT32 file systems. The unit supports imaging from source drives formatted to any major file system. <\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Multi-task<\/strong><br>Image simultaneously from multiple sources to multiple destinations including a network repository. Supports imaging to one location while simultaneously hashing and\/or wiping a second drive. Perform up to 5 tasks concurrently. Little or no speed degradation when imaging from two sources to two destinations.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Task Macro<\/strong><br>Allows users to set specific tasks to be performed sequentially. For example, first wipe, then image, then verify a drive. Set up to five Macros with up to 9 operations\/tasks for each macro.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Parallel Imaging<\/strong><br>Simultaneously perform multiple imaging tasks from the same source drive to multiple destinations using different imaging formats. For example, clone to a network location or a destination drive in native copy format while imaging to a different destination drive using e01, ex01 dd or dmg format.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Web Browser\/Remote Operation<\/strong><br>An easy to use and intuitive interface allows you to connect to the Falcon-NEO from a web browser and manage all operations remotely. The browser features automatic page scaling for iPad type devices.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Broad Interface Support<\/strong><br>Built-in support for SAS\/SATA\/USB\/PCIe storage devices. Supports eSATA, mSATA and microSATA interfaces with adapters included with Falcon-NEO. Optional adapters are available for 1.8\u2033\/2.5\u2033\/3.5\u2033 IDE, 1.8\u2033 IDE ZIF and flash drives. Supports SCSI drives with optional SCSI module. Supports FireWire enclosures with optional FireWire\u00ae Module. <\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>PCIe Support<\/strong><br>Support for M.2 PCIe and M.2 NVMe type SSDs and mini-PCIe and PCIe express cards is provided using optional adapters<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>CD\/DVD\/Blu-ray Imaging<\/strong><br>The Falcon-NEO can image CD\/DVD\/Blu-ray media by using a USB optical drive connected to the USB port on the Falcon-NEO. The Falcon supports multi-session CD\/DVDs.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Wipe<\/strong><br>Wipe up to DoD specifications or use Secure Erase to erase drives, wipe at speeds up to 27GB\/min<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Image to External Storage Device<\/strong><br>The Falcon-NEO allows you to image to an external storage device such as a NAS, using the 10GbE ports, USB 3.0 or via the SAS\/SATA connection.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Error handling<\/strong><br>Drive error handling is enhanced with a configurable error granularity feature. When a bad sector on the source drive is found Falcon-NEO will, by default skip that sector. Changing the granularity allows more sectors to be skipped. There are 3 options (512 Bytes, 4096 Bytes, 64 KIB). As an example, if 4096 Bytes is chosen, and one of the 8 sectors in that cluster size contains a bad sector, the Falcon-NEO will skip the entire cluster (4096 bytes or 8 sectors). <\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Reverse Read<\/strong><br>setting instructs the Falcon-NEO to skip past a bad sector ( based on error granularity settings) then read backwards, potentially capturing data that may not necessarily be read when skipping the entire block. <\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Removable Storage Drive<\/strong><br>OS and audit trail\/log files are stored on an internal drive. This drive is easily removed for secure\/classified locations. <\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>7\u2033 Touch Screen<\/strong><br>Uses a capacitive touch screen with an easy-to-use interface that provides easy navigation through all operations. An on-screen keyboard is also included. <\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>HPA And DCO Capture<\/strong><br>Detect and capture Host Protected Areas (HPA) and Device Configuration Overlay (DCO) hidden areas on the source (suspect) drive. <\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Compact Size<\/strong><br>The Falcon-NEO is light weight, at 3.0lbs (1.36kg) and features a small footprint of 10\u2033W X 3.25\u2033H X 6.75\u2033D (25.4cm X 8.2cm X 17.1cm). <\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Logical Imaging feature<\/strong><br>Shortens acquisition time. Create a logical image by using pre-set filters, custom filters, file signature filters, and\/or keyword search function to select and acquire only the specific files you need. An MFT report can be generated that contains a potential deleted file list. Format output to L01, LX01, ZIP or directory tree. Users can browse and view directly on the Falcon-NEO display or manage and view on a networked Falcon-NEO from your laptop\/desktop using a web browser.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Image From Desktop\/Laptop PCs<\/strong><br>Create a forensic bootable USB flash drive to image a source drive from a computer on the same network without booting the computer\u2019s native O\/S. Supports Surface Pro 4 and above laptops.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"> <strong>Image from a Mac\u00ae Computer<\/strong> <br>Image from a MAC with USB-C ports using a USB-C to USB-A cable and Target Disk Mode. Users can also image from MACs using Logicube\u2019s USB boot device. Create a forensic bootable USB flash drive to image a source drive from a MAC on the same network without booting the MAC\u2019s native O\/S. The Falcon-NEO supports imaging from MacBook Pro systems.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Partition Imaging<\/strong><br>Select an image specific partitions on the source drive.<br><\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>BitLocker Support<\/strong><br>Image source drives that have been encrypted using BitLocker. Decrypt partitions (requires the BitLocker password) and then image the selected partition. BEK (BitLocker Encryption Key) file is supported to unlock FIPS-compliant BitLocker encryption.<br><\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>ATA Security<\/strong><br>Unlock and clone ATA Security locked drives. Temporarily unlock drives and then clone, hash or wipe. Requires ATA Security password to unlock.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Network Traffic Capture<\/strong><br>Capture network traffic, internet activity and VOIP. Sniff data on a network and store captured packets on a hard drive connected to Falcon-NEO. The data is saved and stored to a *.pcanpg file format which can be opened by various software programs such as Wireshark. Chain destination feature allows spanning to multiple destinations.<br><\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Network Services<\/strong><br>Users can disable various network services such as HTTP, SSH, Telnet, CIFS\/NETBIOS, iSCSI Iperf and Ping, for security purposes.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>File Browser\/Write-Blocked Drive Preview.<\/strong><br>Preview drive contents directly on the Falcon-NEO. The file browser feature provides logical access to source or destination drives connected to Falcon-NEO. Users can view the drive\u2019s partitions and contents and view text files, jpeg, PDF, XML, HTML files. Users can also view the contents of .dd, e01, ex01, dmg image files created by Falcon-NEO. Other methods to preview include using the file browser feature and Falcon-NEO\u2019s web browser on a PC\/laptop or preview over a network via SMB or iSCSI (as an iSCSI target). 3rd party analysis tools can be used with SMB or iSCSI methods.<br><\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Network Push Feature<\/strong><br>Push evidence files from destination drives connected to the Falcon-NEO or from a Falcon-NEO repository to a network location. The Push feature provides a more secure method than simply copying and pasting to the analysis computer by performing an MD5 or SHA hash during the push process. Additionally, users can select to verify the file transfer to ensure data integrity. Network users can then quickly preview data or copy data to a local drive or to any other directory on the network. The Falcon-NEO generates a log file for each push process.<br><\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Image Restore<\/strong><br>File to drive mode restores dd, dmg, e01, ex01 images created by the Falcon-NEO to another drive.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>User Profiles\/Configurations<\/strong><br>Administrators can save configuration settings and set password-protected user profiles.<br><\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Audit Trail Reporting\/Log Files<\/strong><br>Provides detailed information on each operation. Log files can be viewed on Falcon-NEO or via a web browser, exported to XML, HTML or PDF format to a USB enclosure. Users can print the log files directly from their PC when connected to Falcon-NEO via a web browser<br><\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Encryption<\/strong><br>Secure sensitive evidence data with open-source whole drive NIST recommended XTS-AES-256 encryption cipher mode. Decryption can be performed using the Falcon-NEO<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Drive Trim<\/strong><br>Allows the Falcon-NEO to manipulate the DCO and HPA area of the destination drive so that the destination drive\u2019s total native capacity matches the source drive.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Resume Feature<\/strong><br>for the drive to drive cloning tasks that get interrupted (for example, due to a power loss or if a task is aborted) will give the user the option to resume or restart.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Drive \u201cTime-Out\u201d Feature<\/strong><br>Users can set a specific \u201ctime-out\u201d for hard drives connected to Falcon-NEO. After a specified amount of idle time, the drive will be automatically put into standby mode, powering down the drives.<\/p>\n\n\n\n<p class=\"has-very-dark-gray-color has-text-color\"><strong>Drive Spanning<\/strong><br>Capture from one large capacity drives to two smaller capacity drives.<br><strong>Blank Disk Check<\/strong><br>Verifies if the source or destination disk is empty or has been wiped.<\/p>\n\n\n\n<p><strong>Cloud Storage Acquisition<\/strong><\/p>\n\n\n\n<p>Now included as a standard feature. Allows users to acquire files from OneDrive, Dropbox, or Google Drive. Capture to any destination drive or network repository.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-dots\"\/>\n","protected":false},"excerpt":{"rendered":"<p>The Falcon-NEO2 is the groundbreaking follow-on to the Falcon\u00ae-NEO which has long been recognized as the \u201cBest In Class\u201d among all imagers. Retooled and optimized with a powerful new engine, the Falcon-NEO2 is the first field imager surpassing 100GB\/min E01 capture speeds. Its SAS-3 architecture (12 Gbps SAS) supports up to 5 simultaneous tasks with&hellip; <br \/> <a class=\"read-more\" href=\"https:\/\/akl-it.com\/home\/products\/duplication-system\/forensic-duplicator\/falcon-neo\/\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":67,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"fullwidth.php","meta":[],"_links":{"self":[{"href":"https:\/\/akl-it.com\/home\/wp-json\/wp\/v2\/pages\/2149"}],"collection":[{"href":"https:\/\/akl-it.com\/home\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/akl-it.com\/home\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/akl-it.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/akl-it.com\/home\/wp-json\/wp\/v2\/comments?post=2149"}],"version-history":[{"count":11,"href":"https:\/\/akl-it.com\/home\/wp-json\/wp\/v2\/pages\/2149\/revisions"}],"predecessor-version":[{"id":3370,"href":"https:\/\/akl-it.com\/home\/wp-json\/wp\/v2\/pages\/2149\/revisions\/3370"}],"up":[{"embeddable":true,"href":"https:\/\/akl-it.com\/home\/wp-json\/wp\/v2\/pages\/67"}],"wp:attachment":[{"href":"https:\/\/akl-it.com\/home\/wp-json\/wp\/v2\/media?parent=2149"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}