System Requirements for Virtual Appliances
To ensure that JSA works correctly, you must use virtual appliances that meet the minimum requirements.
Your virtual appliance must have at least 256 GB of storage available. Before you install your virtual appliance, use the following formula to determine your storage needs:
(Number of Days) x (Seconds in a day) x (Events per second rate) x (Average size of a log event x 1.5 JSA normalized event overhead) x 1.05 / (1000 x 1000 x 1000) + 40 GB
The following table describes the minimum memory requirements for virtual appliances.
Table 1: Minimum and Suggested Memory Requirements for JSA Virtual Appliances
Appliance | Minimum memory requirement | Suggested memory requirement |
---|---|---|
Virtual JSA Flow Collector | 6 GB | 6 GB |
Flow Processor Virtual | 12 GB | 48 GB |
JSA Event Collector Virtual | 12 GB | 16 GB |
JSA Event Processor Virtual | 12 GB | 48 GB |
JSA Flow Processor Virtual | 12 GB | 48 GB |
Virtual JSA All-in-One or Virtual JSA Console | 24 GB | 48 GB |
Virtual JSA Log Manager | 24 GB | 48 GB |
JSA Risk Manager | 24 GB | 48 GB |
JSA Vulnerability Manager Processor | 32 GB | 32 GB |
JSA Vulnerability Manager Scanner | 16 GB | 16 GB |
The following table describes the minimum CPU requirements for virtual appliances.
Table 2: CPU Requirements for JSA Virtual Appliances
Appliance | Threshold | Minimum number of CPU cores | Suggested number of CPU cores |
---|---|---|---|
Virtual JSA Flow Collector | 10,000 Flows per minute (FPM) or less | 4 | 4 |
JSA Event Collector Virtual | 2,500 EPS or less | 4 | 16 |
5,000 EPS or less | 8 | 16 | |
20,000 EPS or less | 16 | 16 | |
JSA Event Processor Virtual | 2,500 EPS or less | 4 | 24 |
5,000 EPS or less | 8 | 24 | |
20,000 EPS or less | 16 | 24 | |
40,000 EPS or less | 40 | 40 | |
80,000 EPS or less | 56 | 56 | |
JSA Flow Processor Virtual | 150,000 FPM or less | 4 | 24 |
300,000 FPM or less | 8 | 24 | |
1,200,000 FPM or less | 16 | 24 | |
2,400,000 FPM or less | 48 | 48 | |
3,600,000 FPM or less | 56 | 56 | |
JSA Event and Flow Processor Combo | 200,000 FPM or less 5,000 EPS or less | 16 | 24 |
300,000 FPM or less 15,000 EPS or less | 48 | 48 | |
1,200,000 FPM or less 30,000 EPS or less | 56 | 56 | |
Virtual JSA All-in-One or Virtual JSA Console | 25,000 FPM or less 500 EPS or less | 4 | 24 |
50,000 FPM or less 1,000 EPS or less | 8 | 24 | |
100,000 FPM or less 1,000 EPS or less | 12 | 24 | |
200,000 FPM or less 5,000 EPS or less | 16 | 24 | |
300,000 FPM or less 15,000 EPS or less | 48 | 48 | |
1,200,000 FPM or less 30,000 EPS or less | 56 | 56 | |
Virtual JSA Log Manager | 2,500 Events per second (EPS) or less | 4 | 16 |
5,000 EPS or less | 8 | 16 | |
JSA Vulnerability Manager Processor | 4 | 4 | |
JSA Vulnerability Manager Scanner | 4 | 4 | |
JSA Risk Manager | 8 | 8 |