Managed Detection & Response Appliance Requirements

As you begin installing virtual and physical appliances for Alert Logic intrusion detection and managed web application firewall products, confirm that your systems meet appliance requirements.

The main use for an Alert Logic virtual appliance is for network intrusion detection system and scanning in VMware deployments, while the Alert Logic physical appliance is a server that is pre-configured by Alert Logic to collect intrusion detection system data and provide web application firewall services.

Note: The following information applies only to those customers who have Alert Logic® Managed Detection & Response entitlements.

 Note: This information and more can also be found within Alert Logic Product Documentation.

Intrusion Detection System Appliance Requirements

Virtual Appliance

The following table describes the basic system requirements to install a virtual intrusion detection system appliance: 

Note: Bandwidth volume directly impacts the ability of the appliance to inspect traffic. Therefore, high traffic environments may require a virtual machine with additional processor and memory resources. If you want to run scans, consider 8 virtual CPUs and 16 GB of memory.

Physical Appliance

The following table describes the basic requirements to install an intrusion detection system physical appliance:

Managed Web Application Firewall Appliance

VMware Virtual Appliance

The following table describes the basic system requirements to install a VMware virtual appliance: 

Note: If your CPU usage is above 80% for extended periods, Alert Logic recommends adding processor resources.

Processing Capacity

The following table describes the bandwidth limits for the managed web application firewall physical appliances: 

Note: This is the recommended basic configuration for the Alert Logic web application firewall product when deployed on a virtual appliance. Bandwidth volume directly impacts the ability of the appliance to inspect traffic. Therefore, high traffic environments may require a virtual machine with additional processor and memory resources. If you want to enable scans, the recommended configuration is 8 virtual CPUs and 16 GB of memory.

Physical Appliance

The following table describes the basic requirements to install a Web Security Manager Premier physical appliance: