Alert Logic Requirements for Virtual and Physical Appliances
Requirements for Alert Logic IDS virtual appliances
Bandwidth volume directly impacts the ability of the appliance to inspect traffic. High-traffic environments may require a virtual machine with additional processor and memory resources.
The following table describes the basic system requirements to install a virtual IDS appliance:
| Virtual CPU cores | Components | System Requirements |
|---|---|---|
| 4 cores | RAM | 16 GB |
| Disk space | 40 GB minimum | |
| Supported virtual environment | VMware and Hyper-V | |
| Encryption | TLS Standard (SSL): 2048-bit key encryption, 256-bit AES bulk encryption | |
| Peak supported throughput | 500 Mbps | |
| 8 cores | RAM | 32 GB |
| Disk space | 40 GB minimum | |
| Supported virtual environment | VMware and Hyper-V | |
| Encryption | TLS Standard (SSL): 2048-bit key encryption, 256-bit AES bulk encryption | |
| Peak supported throughput | 1 Gbps | |
| 16 cores | RAM | 64 GB |
| Disk space | 40 GB minimum | |
| Supported virtual environment | VMware and Hyper-V | |
| Encryption | TLS Standard (SSL): 2048-bit key encryption, 256-bit AES bulk encryption | |
| Peak supported throughput | 2 Gbps (1 Gbps per fiber interface) |
Physical IDS appliance specifications
Bandwidth volume directly impacts the ability of the appliance to inspect traffic. High-traffic environments require physical appliances with additional power, processor, and memory resources.
Alert Logic provides three tiers of physical appliances to meet system requirements. The following table describes the components and specifications for each appliance:
| Appliances | Components | System Specifications |
|---|---|---|
|
Tier 1 - R230XL |
CPU | 4 cores |
| RAM | 16 GB | |
| Disk Space | 1 TB | |
| Chassis | 1U rack mounted | |
| Power | 250W | |
| Encryption | TLS Standard (SSL): 2048-bit key encryption, 256-bit AES bulk encryption | |
| Peak throughput | 500 Mbps | |
| Tier 2 - R640XL | CPU | 8 cores |
| RAM | 32 GB | |
| Disk Space | 1 TB | |
| Chassis | 1U rack mounted | |
| Power | 750W | |
| Encryption | TLS Standard (SSL): 2048-bit key encryption, 256-bit AES bulk encryption | |
| Peak throughput | 1 Gbps | |
| Tier 3 - R640XL | CPU | 24 cores |
| RAM | 64 GB | |
| Disk Space | 1 TB | |
| Chassis | 1U rack mounted | |
| Power | 750W | |
| Encryption | TLS Standard (SSL): 2048-bit key encryption, 256-bit AES bulk encryption | |
| Peak throughput | 2 Gbps (1 Gbps per fiber interface) |
Physical Log Manager appliance specifications
The following table describes the basic specifications for the physical appliance:
| Components | System Specifications |
|---|---|
| CPU | Intel Xeon |
| RAM | 4 GB |
| Disk space | 500 GB |
| Chassis | 1U rack mounted |
| Power | 250W |
| Encryption | TLS Standard (SSL): 2048-bit key encryption, 256-bit AES bulk encryption |
Requirements for Alert Logic Managed Web Application Firewall (WAF) appliances
VMware WAF virtual appliance
If your CPU usage is above 80 percent for extended periods, Alert Logic recommends adding processor resources.
The following table describes the basic system requirements to install a VMware virtual appliance:
| Components | System Requirements |
|---|---|
| CPU | 2 CPUs 64 bit |
| RAM | 4 GB |
| Disk space | 250 GB |
| Virtual network interface(s) | An interface with an external IP address for management An interface with access to the web servers to be protected |
| Encryption / Decryption for SSL traffic | AES-NI CPU instruction set for encryption/decryption of SSL traffic on VMs and host OS is recommended |
| Clustering | For clustering to work, ensure promiscuous mode, forged transmits, and MAC address changes are allowed on the VMware virtual switch (vSwitch) or the port group in the VMware ESX network configuration |
Physical WAF appliance capacity
Bandwidth volume directly impacts the ability of the appliance to manage traffic. High-traffic environments may require appliances with additional power, processor, and memory resources.
The following table describes the basic bandwidth limits for the WAF physical appliances:
| Appliances | Throughput | Number of Virtual Hosts | Number of SSL Certificates | Number of Proxies |
|---|---|---|---|---|
| Tier 1 - R410, R220, R230 | 0-250 Mbps | 1000 | 100 | 200 |
| Tier 2 - R630 | 250-1000 Mbps | 1000 | 100 | 200 |
Physical WAF appliance specifications
The following table describes the basic specifications for the physical appliance:
| Components | System Specifications |
|---|---|
| CPU | Intel Xeon |
| RAM | 4 GB |
| Disk space | 500 GB |
| Chassis | 1U rack mounted |
| Power | 250W |
| Encryption | TLS Standard (SSL): 2048-bit key encryption, 256-bit AES bulk encryption |