Juniper Security Director System Requirements for Microsoft Azure

Hardware Requirements

See Table 1 for recommended VM configurations, device management, and storage. Choose a supported Azure VM size for optimal performance.

Table 1: Hardware Requirements for Azure
VM Size	VM Configuration	Device Management Capability	EPS
Standard_E8s_v5	CPUs—8 vCPUs Memory—64 GB RAM Total disk—1 TB OS disk (Hard disk 0)—200 GB Config disk (Hard disk 1)—250 GB Log disk (Hard disk 2)—500 GB	Up to 200 devices Up to 2500 policy rules per device Up to 2000 NAT rules per device Up to 250 VPNs per device/system	Up to 5000 logs per second
Standard_E16s_v5	CPU—16 vCPU Memory—80 GB RAM Total disk—2.1 TB storage OS disk (Hard disk 0)—200 GB Config disk (Hard disk 1)—400 GB Log disk (Hard disk 2)—1.5 TB	Up to 1000 devices Up to 10000 policy rules per device Up to 6000 NAT rules per device Up to 1000 VPNs per device/system	Up to 14000 logs per second
Standard_E48s_v5	CPU—48 vCPU Memory—208 GB RAM Total disk—4.2 TB storage OS disk (Hard disk 0)—200 GB Config disk (Hard disk 1)—525 GB Log disk (Hard disk 2)—3.5 TB	Up to 3000 devices Up to 20000 policy rules per device Up to 10000 NAT rules per device Up to 1500 VPNs per device/system	Up to 35000 logs per second

Note:

We do not recommend sharing resources.
You can switch from supported lower VM configuration option to any supported higher VM configuration, such as from Standard_E8s_v5 to Standard_E16s_v5 or Standard_E48s_v5, or from Standard_E16s_v5 to Standard_E48s_v5. However, once you switch to a higher VM configuration option, you cannot revert to lower VM configuration option. For instructions to modify the VM configuration in Azure, see Resize the Juniper Security Director VM on Azure.

Unified IP address—You must use one IP address through DHCP for device management, UI access, device connections, and the log collector. All devices must be able to reach the same IP address.
- Management IP address—The VM IP address used to access the Juniper Security Director CLI.
- UI virtual IP address—Virtual IP address to access the Juniper Security Director GUI.
- Device connection virtual IP address—Virtual IP address used to connect managed devices to Juniper Security Director.
- Log collector virtual IP address—Virtual IP address to receive logs from devices.
FQDN reachability—Verify that all Fully Qualified Domain Names (FQDN) associated with these IP addresses are reachable through your public or private networks.