Before you deploy your virtual NDR Console appliance, make sure the following requirements are met.
KVM requirements
The following KVM (Kernel-based Virtual Machine) resources are required:
Ubuntu 18.4 or later or CentOS 7.4 or later
Standard virtual switch, connected to an external network and shared by the operating system
Ubuntu:
KVM version (kvm -version): QEMU emulator version 2.11.1 (Debian 1: 2.11 + dfsg-ubuntu 7.9)
libvirtd version: libvirtd (libvirt) 4.0.0
CentOS:
KVM version: QEMU emulator version 1.5.3 (qemu-kvm-1.5.3-160.el7t)
libvirtd version: libvirtd (libvirt) 4.5.0
Virtual machine requirements
The following sections list the virtual machine requirements in virt-manager and Proxmox Virtual Environment (VE) deployments.
CPU cores: 16 (minimum)
Note
Add CPU cores as needed to meet your anticipated network bandwidth.
RAM: 64 GB
Hard disk space:
Important
A minimum storage recommendation of 100Mbps throughput.
Disk 1 (Operating System): 120 GB
Disk 2 (Capture Data): 200 GB
Storage: SCSI
Network requirements
Network information—Gather the following information from your network administrator:
One of the following:
DHCP allocated IP address for the virtual machine.
Static IP address, subnet mask, and default gateway address for the virtual machine.
IP address for each Domain Name System (DNS) server.
IP address for each Network Time Protocol (NTP) server.
Network access—See the Trellix Ports and Protocols Reference Guide for a list of the required ports for network access.
License requirements
The following license is required for system operation.
FIREEYE_APPLIANCE is the base product license that is tied to your activation code. It enables NDR Console features and functionality.
CONTENT_UPDATES for downloading security content packages from the DTI server.
NDR License is either the ESSENTIALS/CORE or ENTERPRISE license keys for NDR functionality.
Minimum System Requirements for NDR-CORE and NDR-ENTERPRISE Licenses
Note
These requirements apply to all Virtual NDR Console variants when using an NDR Console-CORE or NDR Console-ENTERPRISE license.
Minimum RAM: 64 GB
Minimum CPU: 16 cores