EDRF On-prem system requirements

Prev Next

Component

Requirement

TrellixePO

5.10 service pack 1 update 4 or later

DXL broker

6.1.3 or later

HX server

10.0.4 or later

EDRF Client

50.1 or later

EDRF ePO extension

2.1.1 or later

EDR Telemetry Store virtual appliance

25.11.0 or later

  • vCPU cores: 4

  • Memory: 8 GB

  • Storage: 254 GB (The disk is thin-provisioned)

  • Network: 1 Network Interface Card (NIC)

  • Virtualization: Tested with VMware ESXi Hypervisors and Nutanix

    • Version 26.03 or earlier: Supports VMware ESXi only.

    • Version 26.06 or later: Supports both VMware ESXi and Nutanix Acropolis Operating System (AOS) version 7.3 or later.

Note

The virtual appliance can scale up to 16 vCPU cores and 64 GB of memory. You can also add up to 12 TB of additional storage, which is the approximate size required to store 30 days of trace data from 10,000 endpoints.

For more information, see Increase or add storage on a virtual appliance.

Trellix EDR with Forensics On-Prem - Add-On 25.11 package contents

  • EDR Telemetry Store virtual appliance (OVA package)

  • HX Historical Search module (.cms file)

For supported platforms, see the Trellix Knowledge Base (KB) article, Supported Platforms for Trellix EDR with Forensics - KB000014084.