Data Center Security

 View Only
  • 1.  Sizing for SDCS:SA

    Posted Nov 03, 2014 01:20 PM

    How many agents can 1 management server handle?   Is there a way for 2 or more management servers to forward events to a management server that is connected to the SQL DB so that multiple servers aren't trying to write to the same DB at the same time?

     

    For example

    Agent 1-1000----->   MGMT Server 3 ------\

                                                                         \

                                                                             --------->  MGMT Server 1 --------> SQL DB

                                                                           /

    Agent 1001-2000 ---> MGMT Server 2 -------/



  • 2.  RE: Sizing for SDCS:SA

    Posted Nov 04, 2014 06:59 AM

    There will only ever be 1 database(you can cluster the DB is needed), like your diagram says, butr you dont need MGMT Server1.  You can choose to send the agents to either Server 2 or 3, they will both send events to the database.  

     

    Depending on the amount of events, a server is rated to hold (i think) 4000 agents each.  This is obviously highly dependant on the speed of your database.



  • 3.  RE: Sizing for SDCS:SA

    Posted Nov 12, 2014 01:56 PM

    CSP has been QA'd to handle 10000 agents per mangement (Tomcat) server.  However, if you have really noisy policies that are generating a ton of events, you will need to reduce the amount of agents that talk to each Tomcat server.

    Also, plan on failover and stand up enough Tomcat servers so that is one goes down, the other(s) can handle all the traffic.

    You can have as many Tomcat servers as you need.