Cluster VM auto synchronization

Prev Next

The primary node pushes all VM settings to the secondary nodes, which enable auto synchronization within VM clusters.

Adding nodes in a hybrid cluster scenario

In a cluster, ATD-3000, ATD-3100, ATD-6000, and ATD-6100 are all treated as different appliances. For example, a cluster with only ATD-3000 and ATD-3100 is considered a hybrid cluster. Similarly, a cluster with ATD-6000 and ATD-6100 is considered a hybrid cluster.

Scenario

Outcome

Add an ATD-3000 or ATD-3100 or ATD-3200 to a cluster with ATD-6000 or ATD-6100 or ATD-6200 as primary node, with more than 30 VMs

Intelligent Sandbox notifies you to decrease the licenses in ATD-6000 or ATD-6100 or ATD-6200 primary node before you can add the secondary node.

Add an ATD-6000 or ATD-6100 node with more than 30 VMs to a cluster with an ATD-3000 or ATD-3100 primary node

Intelligent Sandbox successfully adds the node to the cluster, and secondary node VMs are deleted.

Primary node upgrade in a hybrid cluster scenario

Scenario

Outcome

Upgrade ATD-6000 or ATD-6100 primary node with more than 30 VMs and one ATD-3000 or ATD-3100 secondary node.

Intelligent Sandbox notifies you to decrease the VM licenses in ATD-6000 or ATD-6100 to 30 or less.

When you fail to decrease the number of licenses, synchronization causes the VM creation process to fail in ATD-3000 or ATD-3100 nodes.

Upgrade ATD-3000 or ATD-3100 or ATD-3200 primary node and ATD-6000 or ATD-6100 or ATD-6200 secondary node with more than 30 VMs

Intelligent Sandbox successfully completes upgrade. When the synchronization process completes, you must delete the additional secondary ATD-6000 or ATD-6100 or ATD-6200 nodes.

Configuration

Definition

Synchronized

Intelligent Sandbox automatically synchronizes these settings between all nodes:

  • VM profiles

    When you add nodes to clusters, or change the primary node VM profile, Intelligent Sandbox pushes the primary node VM configurations to the secondary nodes.

  • Maximum threshold wait time

  • LDAP user credentials

  • Proxy settings

  • SNMP settings

  • Syslog settings

  • Blacklist entries

  • Whitelist entries

  • Telemetry

  • User management

  • ePO - On-prem integration

  • Trellix DXL integration

  • DNS settings

  • Backup database

  • System time

  • Global settings

On the secondary and backup nodes, Intelligent Sandbox disables the web interface settings.

Unsynchronized

If you want to change the following settings, you must change them on each individual node:

  • Intelligent Sandbox software version

  • Anti-Malware Engine DAT and engine versions

  • Gateway Anti-Malware Engine DAT and engine versions

  • Time zone

  • NTP server time zone

  • Custom YARA rules

  • CLI configuration changes