Data Loss Prevention

 View Only
Back to discussions
Expand all | Collapse all

Building a full blown Testing Environment for DLP, Data Insight, and ITA. Any suggestions?

  • 1.  Building a full blown Testing Environment for DLP, Data Insight, and ITA. Any suggestions?

    Posted Jan 10, 2014 02:05 PM

    Hello,

    I am at best an intermidiate user of DLP, DI, and ITA. I have been asked to create a wish list, if you will, of things I would like to see in a test environment for the products I mentioned before. We are a large environment and I would like to mimic production as much as possible.

    Here's what I am thinking of:

    4 Physical/Virtual Servers: 1 Network Monitor, 1 Network Discover, 1 Endpoint Server, *1 Data Insight management Server

    1)      Enforce Server: 24 Core CPU (6 X 2 X 2), 24 GB Ram, HD Space: C: Drive 80 GB, D: Drive 250 GB (This will be the data drive), RAID 1+0 or RAID 5, 1 copper or fiber 1 Gb/100 Mb Ethernet NIC, Microsoft Windows Server 2008 R2 SP1, Enterprise or Standard Edition (64-bit)

    2)      Network Discover: 24 Core CPU (6 X 2 X 2), 24 GB Ram, HD Space: C: Drive 80 GB, D: Drive 250 GB (This will be the data drive), RAID 1+0 or RAID 5, 1 copper or fiber 1 Gb/100 Mb Ethernet NIC, Microsoft Windows Server 2008 R2 SP1, Enterprise or Standard Edition (64-bit)

    3)      Network Monitor: 24 Core CPU (6 X 2 X 2), 24 GB Ram, HD Space: C: Drive 80 GB, D: Drive 250 GB (This will be the data drive), RAID 1+0 or RAID 5, 1 copper or fiber 1 Gb/100 Mb Ethernet NIC, Microsoft Windows Server 2008 R2 SP1, Enterprise or Standard Edition (64-bit) + To communicate with the Enforce Server: 1 copper or fiber 1 Gb/100 Mb Ethernet For network traffic monitoring (pick one): 1 copper or fiber 1 Gb/100 Mb Ethernet NIC.

    4)      Data Insight Management Server: Windows Server 2008 64 bit; 16 GB RAM, 2 CPUs,  HD Space: C: Drive 80 GB, D: Drive 150 GB (This will be the data drive)

    * Can the DI Indexer and the Collector exist on the DI Management server or should they be seperate? Can any of these be consolidated for that matter? How about DLP Email and Web Prevent?

     

    Oracle Test DB for DLP: *We already have a test environment set up for Altiris/Symantec Management and SQL Platform 

    Specifications: One of the following operating systems:

    Microsoft Windows Server 2003 (32-bit) (with Oracle Standard Edition only)

    ■ Microsoft Windows Server 2008 R2 (64-bit)

    ■ Microsoft Windows Server 2008 R2 SP1 (64-bit)

    ■ Red Hat Enterprise Linux 5.2 through 5.8 (32-bit) (with Oracle Standard Edition only)

    ■ Red Hat Enterprise Linux 5.2 through 5.8 (64-bit)

    ■ 16 GB of RAM, 16 GB of swap space (equal to RAM), 500 GB – 1 TB of disk space for the Enforce database

     

    I know this is kind of long, but I'm trying to be thorough. Thanks for any help and suggestions you can provide. 



  • 2.  RE: Building a full blown Testing Environment for DLP, Data Insight, and ITA. Any suggestions?
    Best Answer

    Broadcom Employee
    Posted Jan 11, 2014 04:18 AM

    For the Data Insight environment, the DI indexer and the collector can exist on the DI management server.

    Actually, for a medium size customer, this is a recommended installation.

    For DLP Email Prevent and Web Prevent, it is recommended to install these two kind of servers separately.



  • 3.  RE: Building a full blown Testing Environment for DLP, Data Insight, and ITA. Any suggestions?

    Posted Mar 06, 2014 04:27 PM

    Thanks for the help!